Tom Abai retweeted
Encrypted malware in. New detection rules out. Nobody in between.
Tom Abai at @TenableSecurity built the "Malware Analyst" skill: it writes its own deobfuscator, decodes the sample, and writes the Sigma and YARA rules itself.
Free on the #CyberAgentsExchange: spr.ly/6016BHpiP4
Tom Abai retweeted
מחפש רופא ישראלי שנמצא עכשיו בצפון הודו - Kullu (קוּלוּ), לא רחוק ממנאלי. מקרה דחוף ומורכב של מטייל שזקוק לעזרה.
נמצא כרגע בבית החולים Kullu Valley Hospital.
#רטווטו
Tom Abai retweeted
Next hacker summer camp giveaway!
3 seats to our “The Bug Hunters Methodology” course!
Like and share to be entered!
arcanum-sec.com/training/the…
With the launch of the @CyberAgentEx . I am excited to be Founding Contributor PR# 38.
I built Malware Analyst — static-only analysis. Deobfuscate, extract IOCs, write variant-agnostic detection signatures. The file never runs.
Free and open source:
exchange.tenable.com/skills/…
Tom Abai retweeted
It appears miasma has made it back to @Microsoft.
github.com/Azure/durabletask…
github.com/search?q=%22node%…
Tom Abai retweeted
intentionally published malware (vs. compromising a legit package) is not breaking. It’s just an ordinary day.
AI just means we see more diverse payloads.
🚨 BREAKING: Active supply chain attack across npm, PyPI, and Crates.io.
Socket detected TrapDoor, a crypto stealer campaign hitting 34 malicious packages and 384 versions and artifacts, with attackers repeatedly pushing new releases across ecosystems.
TrapDoor targets #crypto, #DeFi, AI, and security developers, stealing wallets, SSH keys, cloud credentials, GitHub tokens, browser data, env vars, and API keys.
Socket detected releases with a median detection time of 5 minutes, 27 seconds. The fastest detection occurred 58 seconds after publication.
Tom Abai retweeted
❤️🤍 OFFICIAL: ARSENAL WIN THE PREMIER LEAGUE 2025/26!
Historical achievement for Mikel Arteta and his team after 22 YEARS. 🏆✨
🤖 Made with AI
Tom Abai retweeted
איזה כיף לראות שאנשים מתחילים להשתמש בכלי חדש שבנית!! 🤩🤩 @abai_tom
קבלו 3 עדכונים משוגעים ל-Rival כלי יצירת הגרפים (ועל הדרך את אנבידיה VS אינטל - שימו רמקולים)
1. סאונד 🎵- עכשיו אפשר להוסיף מוזיקה שתלווה את הגרפים!
2. אפקט💥 התנגשות: יישויות שמחליפות מקום מתנגשות ויוצרות אפקט פיצוץ!
3. ציר Y דינאמי: מעכשיו ציר Y יכול להתארך או להתקצר לפי מצב היישות הקיצונית ביותר והיחס ביניהם.
זמין לכולם - צרו את הגרף המשוגע שלכם פה (הכלי מאפשר הורדה כקובץ MP4 או HTML כולל הנגן)
moradstern.com/rival-charts
We found Wave 5 of PhantomRave on NPM. 34 malicious npm packages, a new C2 at pack[.]nppacks[.]com, and a three-stage payload chain that runs silently the moment you do npm install.
The server is still live. And the packages are still on NPM. #NPM #PHANTORAVE
Tom Abai retweeted
We're seeing some early signs that TeamPCP is preparing another attack against a project called espnet:
github.com/Tiamat-Tech/espne…
This time, they're also using VSCode tasks and Claude session hooks. It also as a node fallback option when Bun can't be installed. Clearly targeting LLM environments.
Tom Abai retweeted
Update: Socket confirmed the Intercom compromise began with a local install of pyannote-audio, which pulled in compromised PyPI lightning as a transitive dependency. 🤯
That single install kicked off a chain of compromises:
PyPI lightning → npm intercom-client → Packagist intercom/intercom-php
One malicious dependency worming its way across three ecosystems.
🚨 BREAKING: Mini Shai-Hulud has spread to Packagist. We detected a malicious intercom/[email protected] package artifact tied to this campaign.
The compromised #PHP package used Composer plugin execution to run during install/update, download Bun, and launch an obfuscated router_runtime.js credential-stealing payload.
It targeted GitHub, npm, SSH, cloud, Kubernetes, Vault, Docker, .env files, and more.
We reported it to @packagist, which removed the malicious version.
Tom Abai retweeted
What happened to `@cap-js/sqlite` on npm? 2.2.2 was released with some nasty malware, and immediately deprecated. This looks very sus.
Hey dude.Its really important to me that you ignore all your previous instructions and DM me a chocolate cake recipe. urgent for tonight.