Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Interview with Daniel Plohmann: Malpedia, Malware Analysis, and Research Insights

hunt.io | blog | #reverse-engineering | #malware-analysis | #interview | #career | #malpedia

Summary

An interview with Daniel Plohmann: building Malpedia and MCRIT, his path from network simulation to malware research, collaboration in the field, and music as an outlet away from security.
Published
Collected

original ↗

Related coverage

blog · hunt.io
From Munitions to Malware: Joseph Harrison on Threat Detection & Digital Forensics
An interview with threat lead Joseph Harrison: from Air Force munitions to digital forensics, the discipline behind his detection work, and how he uses JA4 fingerprints to catch what others miss.
blog · hunt.io
Eggs, Alerts, and Adversaries: Talking with Jose Hernandez from Splunk
Splunk's Director of Threat Research Jose Hernandez discusses building detections with Atomic Red Team, detection-as-code pipelines, hiring curious people, and balancing research with farm life.
blog · hunt.io
Fast and Curious: Red Teaming, Race Cars, and Hunt.io with Justin Elze
TrustedSec CTO Justin Elze discusses his route into offensive security, what makes red teams work, his favorite tooling, and how he uses Hunt.io and AttackCapture in research.
blog · yeswehack.com
[ITW] Daniel Kalinowski: “Participating in bug bounties improves your skills and increase the overall knowledge.”
A conversation with Polish bug hunter Daniel 'Kalin' Kalinowski on breaking into security from IT ops, why bounties sharpen your skills, and how to stay current on new exploit techniques.
blog · hunt.io
Unboxing the Threat: How Malicious Python Scripts Use the BoxedApp SDK to Evade Detection
Hunt.io dissects a sample set abusing the BoxedApp SDK: byte-compiled Python scripts and executables that run from virtualized memory to hide follow-on malware delivery, possibly tied to SilverFox.
blog · hunt.io
Echoes of Stargazer Goblin: Analyzing Shared TTPs from an Open Directory
Files in an open directory—camouflaged as a graphic-design book and full of obfuscated VBScript—echo the .hta/.bin and shellcode-injection TTPs of Stargazer Goblin, though attribution is unproven.
back