Xavier Mertens 🇧🇪
LightNews LightNews
banner
eeksme.bsky.social
Xavier Mertens 🇧🇪
@eeksme.bsky.social
210 followers 21 following 39 posts
A fork of https://twitter.com/xme
Posts Replies Media Videos
Reposted by Xavier Mertens 🇧🇪
sansisc.bsky.social
Python Bot Delivered Through DLL Side-Loading https://isc.sans.edu/diary/31778
ISC Logo
March 18, 2025 at 7:37 AM
eeksme.bsky.social
Great talk! 🥳
candid.bsky.social Candid/MyLaocoon @candid.bsky.social · Mar 14
@cryptax.bsky.social on stage at #insomniHack
Using Radar2 and AI to analyse malware more efficiently
March 15, 2025 at 7:25 AM
eeksme.bsky.social
Good morning from #Insomnihack! I’m here today, ping me if you want to meet!
March 14, 2025 at 8:03 AM
Reposted by Xavier Mertens 🇧🇪
sansisc.bsky.social
Shellcode Encoded in UUID's https://isc.sans.edu/diary/31752
ISC Logo
March 10, 2025 at 8:30 AM
eeksme.bsky.social
Njrat Campaign Using Microsoft Dev Tunnels isc.sans.edu/diary/31724
#SANSISC
February 27, 2025 at 3:10 PM
Reposted by Xavier Mertens 🇧🇪
hexacorn.bsky.social
Every once in a while you come across interesting PE Section names

Hello
Guy!

www.virustotal.com/gui/file/051...
February 19, 2025 at 12:45 PM
eeksme.bsky.social
XWorm Cocktail:  A Mix of PE data with PowerShell Code isc.sans.edu/diary/31700 #SANSISC
XWorm Cocktail:� A Mix of PE data with PowerShell Code - SANS Internet Storm Center
isc.sans.edu
February 19, 2025 at 7:39 AM
eeksme.bsky.social
Monday morning reading with your 0xC0FFEE:
www.elastic.co/security-lab...
You've Got Malware: FINALDRAFT Hides in Your Drafts — Elastic Security Labs
During a recent investigation (REF7707), Elastic Security Labs discovered new malware targeting a foreign ministry. The malware includes a custom loader and backdoor with many features including using...
www.elastic.co
February 17, 2025 at 6:30 AM
eeksme.bsky.social
The Danger of IP Volatility isc.sans.edu/diary/31688 #SANSISC
The Danger of IP Volatility - SANS Internet Storm Center
The Danger of IP Volatility, Author: Xavier Mertens
isc.sans.edu
February 15, 2025 at 7:28 AM
Reposted by Xavier Mertens 🇧🇪
sansisc.bsky.social
Fake BSOD Delivered by Malicious Python Script https://isc.sans.edu/diary/31686
ISC Logo
February 14, 2025 at 12:31 PM
eeksme.bsky.social
The Unbreakable Multi-Layer Anti-Debugging System isc.sans.edu/diary/31658
February 6, 2025 at 8:22 AM
eeksme.bsky.social
Be honest… we all do that… taking screenshots of important information! Be careful and don’t keep them for a long time! #InfoStealer #Malware #OCR

t.co/cjI7gNLkW5
https://securelist.com/sparkcat-stealer-in-app-store-and-google-play/115385/
t.co
February 6, 2025 at 8:11 AM
Reposted by Xavier Mertens 🇧🇪
sansisc.bsky.social
From PowerShell to a Python Obfuscation Race! https://isc.sans.edu/diary/31634
ISC Logo
January 29, 2025 at 8:41 AM
Reposted by Xavier Mertens 🇧🇪
sansisc.bsky.social
Fileless Python InfoStealer Targeting Exodus https://isc.sans.edu/diary/31630
ISC Logo
January 28, 2025 at 7:16 AM
eeksme.bsky.social
Let’s wrap up the week with the malware analysis tournament! Wanna join the fun? My next class is in March in London #FOR610 #SANSEMEA
January 25, 2025 at 8:15 AM
eeksme.bsky.social
Make Malware Happy isc.sans.edu/diary/31560 #SANSISC
January 6, 2025 at 7:50 AM
eeksme.bsky.social
SwaetRAT Delivery Through Python isc.sans.edu/diary/31554
SwaetRAT Delivery Through Python - SANS Internet Storm Center
SwaetRAT Delivery Through Python, Author: Xavier Mertens
isc.sans.edu
January 3, 2025 at 6:46 AM
eeksme.bsky.social
More SSH Fun! isc.sans.edu/diary/31542
More SSH Fun! - SANS Internet Storm Center
More SSH Fun!, Author: Xavier Mertens
isc.sans.edu
December 24, 2024 at 6:40 AM
eeksme.bsky.social
Modiloader From Obfuscated Batch File isc.sans.edu/diary/31540
Modiloader From Obfuscated Batch File - SANS Internet Storm Center
Modiloader From Obfuscated Batch File, Author: Xavier Mertens
isc.sans.edu
December 23, 2024 at 6:33 AM
eeksme.bsky.social
Christmas "Gift" Delivered Through SSH isc.sans.edu/diary/31538
Christmas
Christmas "Gift" Delivered Through SSH, Author: Xavier Mertens
isc.sans.edu
December 20, 2024 at 11:08 AM
eeksme.bsky.social
Interesting read: Windows Server 2022 and MsMpEng.exe www.hexacorn.com/blog/2024/12...
https://hexacorn.com/blog/2024/12/2…
December 20, 2024 at 6:28 AM
eeksme.bsky.social
Python Delivering AnyDesk Client as RAT isc.sans.edu/diary/31524
Python Delivering AnyDesk Client as RAT - SANS Internet Storm Center
Python Delivering AnyDesk Client as RAT, Author: Xavier Mertens
isc.sans.edu
December 17, 2024 at 8:02 AM
eeksme.bsky.social
Is it me or the price of printer cartridges became really insane? @HP has a business more lucrative than #ransomware gangs! Hey Bad Guys, move to the printer business! 👿
December 16, 2024 at 9:45 AM
eeksme.bsky.social
“I see coins everywhere!” 😍
December 13, 2024 at 6:48 PM
eeksme.bsky.social
Cyber Defense #Netwars running at full speed in Frankfurt! #SANSEMEA
December 12, 2024 at 6:18 PM