Shot / chaser

Honestly surprised we got “legalize asbestos” before “legalize smoking in restaurants”

Postponing PMRP prep with my second rule for #100DaysOfYARA. This one focuses on finding the B64 decoding routine seen in the final stages of the Coyote Banking Trojan. www.fortinet.com/blog/threat-...

I guess the AI profile pictures are going with a “mugshot” theme now

Idk I guess I don't understand the point of advertising a job as being in one city and then saying you have to relocate to a different city in a different state.

The Attribution Understanders have logged on

Time to buy my first paper Magic cards in years

I finally got around to making my first contribution to #100DaysofYARA 2025 with two YARA rules. My first rule looks to detect Qbit Stealer, a Golang stealer which never really took off. My second rule is designed to hunt various "calling cards" the developer left, which might find related malware.

Threat research in 2024

Got my setup ready to stream @cyberwarcon.bsky.social tomorrow!

Hey if you're a corporate brand social media account migrating to bsky I'd recommend using your domain as your handle.