Rodrigo Escobar

Interesting and simple variation of a web shell found some time ago.. Command execution via popen() and file upload with move_uploaded_file() as usual.. cute ASCII :)

Happy 4th :) 🇺🇸

Very interesting optimization from gcc (-O3) eiz pseudo-register. From what I learned, it is faster to execute this long "do-nothing" instruction (7 byte) than having 7 NOPs. :)

Interesting Fact.. Old Malware doesn't mean Dead Malware.. This cgi/telnet/backdoor dates back to 2003 but still can be found in compromised environments..

Do you believe in ghosts? kkk Defacement page (ASCII) we have in our malware archives. #webmalware

I've been working on some malware analysis and found this simple yet effective mailing tool! Lots of version of it, most of them are probably from Brazilians (Portuguese).

If there's one thing that gets me excited and anxious at the same time, this is definitely one of them! :D :D :D

When performing a Malware Cleanup Investigation, I ran into this interesting binary. No Bueno! If you see this file "cnrig", and you haven't placed yourself to mine bitcoins, please make sure to remove it, kill the process and perform a more thorough investigation :)

BSOD at the airport.. always fun when it's not on the plane :)

We fight malware every single day for pages/images like this not to show up on your website.

Great seats (@united) + Great Reading (@jockowillink) = Amazing Experience.. Too bad I couldn't get an upgrade to economy plus on Houston/Rio being a silver member.

Anyone feeling adventurous today? 😁🤣 Flight snack

We'll get there.. but hey, what a great way to start! :)

Awesome swag :)

Looking forward to this amazing trip

Who said there could only be a "FilesMan" backdoor? :) Password: toor