Live data from Hacker News

I reversed a Node.js malware and found the author

medium.com

61–70 of 79 posts

Re: I reversed a Node.js malware and found the author

#61
Hey, I am the author of the article. Thanks for the buzz here, it's amazing!

I just published on Hackernoon for the non-Medium members: https://hackernoon.com/about/thedevopsguy.

Also, you can find me on Twitter: https://twitter.com/a_devops_guy and Discord: https://discord.gg/FKuAky4K8M

Re: I reversed a Node.js malware and found the author

#62
post #12

Earlier quoted context omitted.

I'm still glad the DELETE thing works, I've reported a few times these with a complete writeup to Discord and all I got was a ticket being auto-closed after a month and the webhooks+servers still being up. I personally no longer bother reporting, just straight delete the webhook to stop the spread. Makes you wonder what their security/support team is doing with all those tickets.

They may not have one, or have one that’s so underwater with larger issues that the rest of the org doesn’t know how to route things to them. Hiring for technical security is hard —you need engineering expertise to find good people, and then you need someone with an infosec background to vet them. Finding a combination of both is surprisingly rare and you usually find infosec folks who can define but not implement a…

How do you mean? Do you mean infosec people usually don't have degrees?

Re: I reversed a Node.js malware and found the author

#63
post #36
post #22

Off note: Is there any service where i can submit an executable (.exe) and it tells me if it contains malware?

Note that this post's malware is advertised with "Low Detections (0/64)".

I'm sure that was true for about ten minutes after it was written, but it's unlikely still the case. This issue appears to suggest detections:

https://github.com/Stanley-GF/PirateStealer/issues/45

I think I've found a relevant virustotal:

https://www.virustotal.com/gui/file/de7535f8c64d7a6ac8094146...

Re: I reversed a Node.js malware and found the author

#64
post #60

Earlier quoted context omitted.

Quoted post unavailable.

Quoted post unavailable.

> I am just saying you are regular busybody fucking asshole

I strongly believe this actually is language that goes against the CoC here on HN.

I think it would have had merit to reasonable talk about different points of view on the story, but any credibility goes down the drain in my book once people start not only to ad hominem others, but resort to language like you used.

Sad, as it could have been an interesting discussion to follow.

Re: I reversed a Node.js malware and found the author

#66
post #22

Off note: Is there any service where i can submit an executable (.exe) and it tells me if it contains malware?

Malware detection relies on signatures and/or heuristics. Signatures won't work with a brand new malware that hasn't been seen before. Heuristics can also be defeated.

Antimalware is great for the low hanging fruit but don't expect it to detect something where the author has put effort into it.

Re: I reversed a Node.js malware and found the author

#68

Earlier quoted context omitted.

I used to just DDOS people’s AIM and messengers if they crossed me, as a phantom curse attached to them and they had no idea the cause. I would chat with them as normal at the same time, chuckling to myself as they kept falling offline following a barrage of emoticons and requests from my army of chat bots that made their process run out of memory. Eventually I’d bore of it. Or have one of the chatbots tell them not…

Way way back in the day, my friend wrote a program that would format the user's Commodore 5 1/4" floppy disk (usually the one that also ran their BBS) if they just tried to load it. They didn't even have to run it. If someone screwed us, we'd create a new identity and upload a file named after a hot new pirated game to their BBS. Then sit back and watch the BBS go offline for a while.

Once in middle school, I wrote a fake format command and added it to autoexec.bat on my moms computer then promptly forgot about it because video games and sugar. Turns out she didn’t turn on her computer until Monday morning while I was at school. Mild mannered me was called to the principals office, expecting the worst. It was my mom on the phone frantically worried that her hard drive had just been nuked. I tell her what I did and she didn’t stop laughing for like 10 minutes. I was still grounded but I was allowed to use the computer or still play video games.

Ahhh the 90s

Re: I reversed a Node.js malware and found the author

#70

Earlier quoted context omitted.

Quoted post unavailable.

It's just as sad you made an account just to troll the user you're replying to, given the username.

that’s pure irony, that account is older and not me, mods follow that pretty closely and would have long flagged all if that was the case

way more amusing all the vms coming out of the woodwork on the most random thread

Post reply on HN