Sign in

Nicole Fishbein

@nicolefishbein.bsky.social
709 followers 36 following 24 posts

Senior security researcher and reverse engineer @Intezer

PostsRepliesMedia
Nicole Fishbein @nicolefishbein.bsky.social · 13/08/2025
[1/2] We detected a new #FireWood Linux backdoor variant. While most of the features remained the same, we discovered some changes in the configuration and an updated set of commands, such as file-read, HideModule, and a new command to terminate the module. More details: intezer.com/blog/threat-...
100
Nicole Fishbein @nicolefishbein.bsky.social · 03/02/2025
[1/] In joint research with Solis Security, we uncovered two zero-day exploits in the VeraCore application actively used by XE Group: an Upload Validation Bypass and an SQL Injection flaw.
120
Nicole Fishbein @nicolefishbein.bsky.social · 30/01/2025
Reversing is fun. Reversing with a view is better!
020
Nicole Fishbein @nicolefishbein.bsky.social · 17/01/2025
This week, I investigated an active campaign targeting Chinese-speaking users. Seeing China, Taiwan, and Hong Kong as targets instantly piqued my curiosity. The attack has been attributed to the Silver Fox APT. Several things in this campaign caught my attention. 🧵
1133
Nicole Fishbein @nicolefishbein.bsky.social · 21/11/2024
Exciting!!
120
Nicole Fishbein @nicolefishbein.bsky.social · 19/11/2024
BabbleLoader: A new loader designed to evade antivirus and sandbox detection. It floods its code with junk instructions, crashing disassembly tools. Using #AI to detect threats? The misleading junk code can trick AI into interpreting irrelevant actions as meaningful ones & it costs lots of tokens.
111