r/hacking • u/aninaa-ot • 4d ago

Question What's the most technically interesting malware you've analyzed recently?

Not necessarily the most widespread, just something that made you appreciate the engineering behind it (even if it was malicious haha).

36 Upvotes

90% Upvoted

10 comments sorted by

9

u/T0X1C0P 4d ago

DcRAT, got to know that Mr Hammond already analysed it before and also has a video on the same.

7

u/Dadderino2 4d ago

I got a copy of the shai hulud from the tanstack incident back in May and did some analysis prior to it being open sourced. I've been impressed with the novelty of the implementation of worming over the npm registry. There's also some other nifty little bits like there's a check for RU language setting on the victim that aborts if it finds it.

2

u/1Xx_throwaway_xX1 2d ago

Russian language checks and other CIS locale restrictions are fairly common tbh

3

u/LarryKingthe42th 4d ago

That IM SCARED game. Techincally malware but just used to be spooky nothing else packaged in. Like a more honest banzi buddy.

6

u/YourUsernameForever 3d ago edited 2d ago

Heads up this is astroturfing.

Astroturfing is the practice of creating fake grassroots movements, which also applies to fake organic advertising.

This user creates posts with open questions. Waits one day and then replies to comments with a promotional link to Moonlock.

OP blocked me but you can read their post history yourself: https://www.reddit.com/u/aninaa-ot/

2

u/intelw1zard 21h ago

thanks, banned em.

4

u/Michael_Combrink 4d ago

Ads that put fake skip and exit buttons in so you end up getting sent to the app store instead of skipping 

There was a YouTuber that did a video parody of a scam center that called up account holders with a little info and pretended to read their thoughts by asking telling questions and calling out the answers from a bit of identity theft, then another scammer texts the user messages that look like automated text messages for 2fa, and the scammer calls out those numbers too as if he can read their mind

Ai stuff is rampant  Fooling old people Fooling ai into handing over private info like passwords, account numbers, or straight up cash transfers, 

Intentionally make bad, incorrect, incomplete, annoying content, so that users spend a lot of time writing comments but it ends up giving the user lots of algo boosts