Viewing profile — mariocandela

Hey HN, I got frustrated with heavy proprietary sandboxes for malware analysis, so I built my own. Azazel is a single static Go binary that attaches 19 eBPF hook points to an isola…

I run a honeypot infrastructure to study attack patterns. Last week, one of my Docker honeypots caught something interesting: an automated campaign exploiting CVE-2025-29927/CVE-20…

So I run research honeypots (Beelzebub) and caught something wild this week. A threat actor is running a massive credential theft campaign against Next.js servers - I'm calling it …

Through our honeypot ( https://github.com/mariocandela/beelzebub ), I’ve identified a major evolution of the RondoDox botnet, first reported by FortiGuard Labs in 2024. The newly d…

I've just published my analysis on RondoDox v2, and the numbers speak for themselves: +650% exploit vectors compared to v1 documented by FortiGuard Labs. Key Findings: - 15+ exploi…

Awesome! Thank you for sharing

Yep I agree, or a "senior" malware vibe coder xD

thank you

thank you

Sorry the link is: https://beelzebub.ai/blog/how-advanced-malware-self-update-s...