@gadi@infosec.exchange What I found super impressive this week is all the EDR tools that were completely reversed and unpacked with open weight LLMs and if that isn't hard to accomplish then the shields are down and everyone still thinks they are working
@patrickcmiller@infosec.exchange I read your article and thought we might enjoy a conversation on clustering. I've been using a technique to fingerprint malware and I'd like to try it with what you saw. Could you share the hashes, or possably share the samples.
thanks,
-rick
@nixCraft@mastodon.social
I've been working on a system to detect simular things, It works for malware and spam, would you like some help detecting the bots? I'd be happy to see if it would work
you can read some about it at https://cyberwarhead.com or https://plan10.org/