Lightnews — Scholar-powered news

Shai-Hulud NPM Worm, IDA 9.2 Changes and PromptLock LLM Ransomware Analysis (Stream - 16/09/2025)

1 1 7

Reposted by Invoke RE

Tony/Humpty (CJ) @c-b.io · 15d

Extremely grateful to have had the opportunity to not only give my first talk today but to do so alongside Josh Reynolds from @invokereversing.bsky.social

In case you missed it, you can find our slides on GitHub here github.com/CoveoSec/tal...

1 2

Invoke RE @invokereversing.bsky.social · 15d

Had a fantastic turnout for our talk at BSides Toronto about the scavenger malware today! Huge thanks to @c-b.io for co-presenting and thank you to everyone for attending!

1 1 5

Invoke RE @invokereversing.bsky.social · 21d

A reminder that @c-b.io and Joshua Reynolds will be speaking at BSides Toronto this Sunday (Oct 5th) at 11:45AM about the Scavenger NPM supply chain attack. See you there!

2 1

Invoke RE @invokereversing.bsky.social · 25d

We've uploaded our stream from last Tuesday where we analyzed the Shai-Hulud NPM worm, looked at changes in IDA 9.2 and analyzed the PromptLock LLM ransomware. Enjoy! youtu.be/MmFyfRB8Qj4

youtu.be

2

Invoke RE @invokereversing.bsky.social · 27d

📸 Joshua Reynolds presenting his keynote at BSides Edmonton today!

Invoke RE @invokereversing.bsky.social · 28d

Tomorrow at BSides Edmonton! 🔥

Reposted by Invoke RE

Malcat dev @malcat4ever.bsky.social · Sep 18

First steps with #malcat? Here is a tutorial video, courtesy of
@invokereversing.bsky.social :
www.youtube.com/watch?v=gqES...

Malcat : First Steps

YouTube video

2 2

Invoke RE @invokereversing.bsky.social · Sep 17

We are excited to announce that our founder Joshua Reynolds and @c-b.io have been accepted to speak at BSides Toronto with their talk titled "When Prettier Gets Ugly: The Scavenger Supply Chain Campaign" more info here: pretalx.com/bsides-toron...

Triaging Obfuscated Binaries with Binary Ninja and AssemblyLine (Stream - 26/08/2025)

Invoke RE @invokereversing.bsky.social · Sep 8

Little Bobby Ignore is at the again…

1 2

Invoke RE @invokereversing.bsky.social · Sep 1

We've uploaded our stream from last week where we analyzed a number of xorstr obfuscated binaries with Binary Ninja and AssemblyLine. Enjoy! youtu.be/6GaJ_VVv2gk

Triaging Malware with Malcat (Stream - 29/07/2025)

youtu.be

2

Invoke RE @invokereversing.bsky.social · Aug 15

We've uploaded our stream from July 28th where we triaged an Emotet infection chain with Renaud from @malcat4ever.bsky.social Enjoy! www.youtube.com/watch?v=xJof...

Scavenger Malware Distributed via num2words PyPI Supply Chain Compromise

Reposted by Invoke RE

Tony/Humpty (CJ) @c-b.io · Jul 28

IT HAPPENED AGAIN

invokere.com/posts/2025/0...

@invokereversing.bsky.social is on FIRE

Technical blog detailing the num2words v0.5.15 PyPI supply chain compromise used to distribute Scavenger malware

invokere.com

Invoke RE DEFCON 33 Meet Up

Invoke RE @invokereversing.bsky.social · Jul 23

Mark your calendars! The Invoke RE DEF CON 33 Meet Up will be at the CASBAR lounge in SAHARA on Thursday, August 7th from 3-6PM. Whether you're a seasoned pro or just starting out, this is a great opportunity to meet malware researchers and reverse engineers! www.eventbrite.ca/e/invoke-re-...

Join us at Invoke RE DEFCON 33 Meet Up for a fun gathering of like-minded individuals interested in malware analysis and reverse engineering

www.eventbrite.ca

Scavenger Malware Distributed via eslint-config-prettier NPM Package Supply Chain Compromise

Invoke RE @invokereversing.bsky.social · Jul 21

We did a full technical blog on the NPM eslint-config-prettier supply chain compromise that was used to distribute the Scavenger malware with @c-b.io check it out! invokere.com/posts/2025/0...

Technical blog detailing the eslint-config-prettier supply chain compromise used to distribute Scavenger malware

invokere.com

Binary Ninja Malware Emulation Plugin Development - Advobfuscator (Stream - 08/07/2025)

Invoke RE @invokereversing.bsky.social · Jul 18

We've uploaded our stream from July 8th where we started writing a plugin for Binary Ninja to perform code emulation to recover obfuscated strings from malware with Binary Refinery. Big thanks to Jesko Huettenhain
for Binary Refinery and vstack. Enjoy! www.youtube.com/watch?v=djMa...

🔥Binary Ninja Code Emulation🔥

Invoke RE @invokereversing.bsky.social · Jul 8

We're live! Let's write a plugin to emulate malware instructions in Binary Ninja! twitch.tv/InvokeRevers...

InvokeReversing - Twitch

twitch.tv

Invoke RE @invokereversing.bsky.social · Jul 6

In case you missed it, check out the “Supper is served” technical blog by cyberj3rry on the Supper backdoor c-b.io/2025-06-29+-... it’s well written and provides a great overview of its functionality!

2025-06-29 - Supper is served - Humpty's RE Blog

c-b.io

Time Travel Debugging in Binary Ninja with Xusheng Li

Invoke RE @invokereversing.bsky.social · Jun 30

We've uploaded our Time Travel Debugging in Binary Ninja stream with Xusheng Li from Vector 35
where we unpacked malware and analyzed anti-analysis capabilities with TTD traces. Enjoy! youtu.be/2v7DRyXb8_c

Beginner Malware Analysis: DCRat with dnSpy (03/06/2025)

youtu.be

2 3

Invoke RE @invokereversing.bsky.social · Jun 24

C’mon…

Invoke RE @invokereversing.bsky.social · Jun 21

We've uploaded our beginner .NET malware analysis stream where we analyzed DCRat with dnSpy. Enjoy! www.youtube.com/watch?v=Cf9O...

We stream reverse engineering, software development and other fun things related to malware analysis.

Invoke RE @invokereversing.bsky.social · Jun 17

Join us for a special stream today at 10AM EST with Xusheng Li from Vector35 where we will explore Time Travel Debugging with Binary Ninja! www.twitch.tv/InvokeRevers...

InvokeReversing - Twitch

www.twitch.tv

1

Invoke RE @invokereversing.bsky.social · Jun 5

We've uploaded our beginner malware analysis stream where we reverse engineered a Babuk ransomware variant with IDA Pro. Enjoy! www.youtube.com/watch?v=xksu...

Beginner Malware Analysis: Babuk Ransomware with IDA Pro (Stream - 13/05/2025)