Reverse Engineering & Malware Research @Fraunhofer_FKIE. Projects: @Malpedia, DGArchive, MCRIT, SMDA, ApiScout, IDAscope.
DE
Joined July 2011
- Tweets514
- Following183
- Followers4.5K
- Likes205
💀 DEATHCon Bonn, 13-14 Nov at Fraunhofer FKIE in Bonn, Germany: two days of hands-on detection engineering and threat hunting workshops (YARA, NetBIOS pivoting, Graph API hunting, and more). Regular tickets end Fri 16 Oct and only a few are left!🎟️ eventbrite.de/e/deathcon-bon…
Daniel Plohmann retweeted
This is it folks! This is the last weekend to submit a DEATHCon workshop CFP proposal if you want to get in the first round of acceptance! We've got a lot of great submissions already but there's room for yours too! deathcon.io Click on CFP. Conf can pay for travel!
I have just published a new data set revision of MalpediaFLOSSed, now aggregating 5.6m unique strings gathered from 2.100 malware families. github.com/malpedia/malpedia…
Daniel Plohmann retweeted
From building Malpedia to tracking malware families at scale, Daniel Plohmann @push_pnx is shaping how we fight cyber threats.
hunt.io/blog/interview-danie…
In this Hunt interview, he shares insights from his research at Fraunhofer FKIE and how music fuels his creativity in security.
Read the full conversation and see how Daniel connects technical expertise with artistic passion ⬇️
#CyberSecurity #ThreatIntelligence #CyberThreats
Daniel Plohmann retweeted
Tickets for #DEATHcon in Montreal are on sale now!
Book now to secure your place. FYI, Virtual Tickets for round 1 are already Sold Out!
eventbrite.ca/e/deathcon-mon…
Additional info (like workshops) for the con can be found here : DEATHcon.io
Please retweet for reach
Daniel Plohmann retweeted
DEATHCon online/remote ticket sale round 1 will start Monday 7th of July at 00:01 UTC! worldtimebuddy.com/?pl=1&lid… Last year they sold out in 24h 😳
On-site tickets will be available on 7/7 at around 10am local time for each site.
All details here: deathcon.io/tickets.html
Daniel Plohmann retweeted
You can now check your strings in #malcat against an online library of #Malpedia FLOSSed strings. Just copy this plugin, courtesy of @push_pnx :
github.com/malpedia/malpedia…
Daniel Plohmann retweeted
🔍 Looking for better detection models for Domain Generation Algorithms (DGA)?
🚀 In our new @RAID_Conference paper, we review a some assumptions that can limit the impact of the DGA detection models and discuss some improvements that can lead to more robust detection models.
Daniel Plohmann retweeted
𝗢𝗻𝗹𝗶𝗻𝗲, 𝗵𝗮𝗻𝗱𝘀-𝗼𝗻, 𝗽𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹, 𝗮𝗻𝗱 𝗳𝗿𝗲𝗲!
CTU's "Introduction to Security" Class opens online for free! Join us and register for free. Starting on Sep 26th. #cybersec #infosec #blueteam #redteam
stratosphereips.org/blog/202…
Daniel Plohmann retweeted
Ticket pre-sales for DEATHCon 2024 are now live! If you attended last year, please see the #announcements channel in Slack. If you aren't still on Slack, DM me and I'll get you the info!
Daniel Plohmann retweeted
🎉 HUGE thank you to the incredible VirusTotal community! We're turning 20 & feeling so grateful for your support over the years. 🙌
Check out our blog for what industry leaders are saying & maybe score some cool swag? #VirusTotal20Years
➡️ blog.virustotal.com/2024/05/…
Daniel Plohmann retweeted
We have released #malcat version 0.9.6, which comes with a new #malware identification service: #Kesakode!
● Works on unpacked malware
● 2000+ malware families & millions of clean + libs in DB
● Only hashes are sent
● Included in Malcat full & pro
malcat.fr/blog/096-is-out-ke…
I wrote a blog post about MalpediaFLOSSed, a collection of ~4 million strings extracted from 1800+ malware families and upgrading its GUI plugin to work with IDA, Ghidra, and Binary Ninja at once!
Kudos to @hyun____22 for Hyara, which pioneered such cross-tool compatibility!
Daniel Plohmann retweeted
reupping this as i am still looking for the right fit. please pay me to eat malware and make bad guys sad.
Daniel Plohmann retweeted
Updated Reverse Engineering Go Malware talk with readable slides so you can read them. Many thanks to @yuriskinfo for fixing it youtube.com/watch?v=ftUvYR9g…
Daniel Plohmann retweeted
📣We updated "Malpedia FLOSSed".
TL;DR: More data, cleaner Rust/Go/Dotnet strings, various tags!
We also created a public web service to make this data more accessible: strings.malpedia.io, as well as an IDA plugin as a demo use case.
Read more -> github.com/malpedia/malpedia…
Daniel Plohmann retweeted
An exciting year is about to end in which cyber security experts have reported more than 250,000 malware sites to URLhaus 🪲 and shared over 160,000 IOCs on ThreatFox 🦊
We have processed 7,844,382 malware samples 📄, conducted 41,847,925 YARA scans on YARAify 🔍 and generated almost 5 Petabyte of network traffic 👀
Our heros of the year (top contributors) have been:
👉 URLhaus: 🥇@geenensp 🥈@lrz_urlhaus
👉 ThreatFox: 🥇@Gi7w0rm 🥈 @drb_ra
👉 MalwareBazaar: 🥇@andretavare5 🥈 @zbetcheckin
👉 YARAify: 🥇 @Casperinous 🥈 @0xThiebaut
Keep up the great work! 💪
Daniel Plohmann retweeted
Do you want to learn YARA to track malware but don't know where to start?
In anticipation of #100DaysofYARA we're giving away 3 free seats to AND's YARA Course!
To enter, reply to this tweet with what malware you want to track. Most creative responses by Friday 2023-11-24 win!
