Derionax 🔜 NFC
2.4K posts

Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi

I can't keep quiet any longer

lil fasty⛧@liltoasterz
we got some real detectives in the fandom
English
Derionax 🔜 NFC retweetledi

I got a bunch of messages and e-mails about this. I was busy dealing with a 13 month old baby.
> weird game on Steam
> potentially malware
> lol ok
> download
> look inside
> .NET binary
> disassemble .NET goop
> look inside
> obfuscated classes and random gunk
> Image 1
> lol ok
> "ClientApp" class
> look inside
> website address where stuff goes
> API key for authentication
> Image 2
> lol ok
When this .dll loads from the game it first initializes by loading actual Unity stuff, then it (tries) to discretely look at your browser extensions (Image 3)
This malware did an absolutely terrible job obfuscating itself. It took me 15 seconds to figure out what it was doing. Whoever they paid, or whatever tool they used, to obfuscated this malware needs to be fired immediately.



Eric Parker@EricParker
PSA: Beyond The Dark (APPID: 3393800) on Steam is malware. Hidden in the unitydll is a dropper which then downloads more malware from a C2 based on what programs and chrome extensions you have (targeting crypto / defi wallets).
English
Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi

Imagine being the NSA and you just get to do looney tunes shit to some scientists on the other side of the world
Think about how insane you would feel when your simulation software is just kinda off, some of the time, in an unfixable way and you can never tell
hanlon’s mortola razr@rhizomaticthot
the fast16 malware was almost certainly targeting spherical implosion simulations. left: unmodified LS-DYNA 970 right: LS-DYNA 970 modified with the relevant portions of fast16.sys both running a spherical implosion deck
English

@GizmoStudGryph @Chron1cAssPain That sounds like some incredible head
English
Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi

Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi
Derionax 🔜 NFC retweetledi





















