@reversinglabs.com
ReversingLabs is the trusted name in file and software security. RL - Trust Delivered.
@reversinglabs.comThe patching window has collapsed.
Mean time to exploit crossed zero in 2024, and AI can turn disclosed vulnerabilities into working exploits in ~10-15 minutes. A patch can now be an answer key for the attacker.
New analysis from ReversingLabs: www.reversinglabs.com/resources/th...
@reversinglabs.comReversingLabs researchers uncovered a malicious npm package posing as an authorized Twilio bug bounty tool.
The package targeted Twilio Account SIDs and Auth Tokens and exfiltrated them via webhook.
We reported it to npm. It was removed within an hour. ⬇️
@reversinglabs.com"Agents are only going to be as smart as the context they can reason on." ExtraHop's Kanaiya Vasani explains why the agentic SOC is an architecture problem before it's a model problem: www.reversinglabs.com/blog/how-to-... #CyberSecurity
@reversinglabs.comA behavioral verdict tells you what a process did. It doesn't tell you what the file is, what else it can do, or who else is running it.
Spectra Analyze gives every CrowdStrike Falcon detection a second opinion that doesn't expire.
Learn more: www.reversinglabs.com/blog/extend-... #SecOps
@reversinglabs.com3/ Delivery is the boring part: ClickFix, ClearFake, and SEO-poisoned pages impersonating open-source tools. Full breakdown and IoCs: reversinglabs.com/blog/infoste... #ThreatIntel
@reversinglabs.com2/ AuraStealer added virtualization this summer, going from ~600KB to 10MB to slow analysis. Remus uses EtherHiding to stash C2 domains in Ethereum smart contracts. ACRStealer rebranded as Amatera and kept running.
@reversinglabs.com1/ Three infostealer families, one business model. AuraStealer, ACRStealer/Amatera, and Remus Stealer are all sold as malware-as-a-service, and ReversingLabs tracked all three across July and August.
