Loves cats, bunnies, and coding. #Ransomware Hunter. Creator of the service ID Ransomware. Views expressed are my own.
United States
- Tweets 14,821
- Following 66
- Followers 36,365
- Likes 13,647
Pinned Tweet
ID #Ransomware is live! Special thanks to @malwrhunterteam for the sub-domain. id-ransomware.malwarehuntert…
269
121
407
🔒CryptoTester v1.7.2.0 for #Ransomware Analysis 🔍
New algorithms, XChaCha20 split into Draft02/03, enhancements to RSA Calculator, new derive/hash algorithms, Keystream Finder tool, and bugfixes.
github.com/Demonslay335/Cryp…
6
25
71
14,313
Michael Gillespie retweeted
We are happy to announce that we are now featured as an alternative source on id-ransomware.
If you can't find a match using them we will be listed as an alternative source. Thank you @malwrhunterteam for providing us with the opportunity to further help people in need!
7
10
68
28,540
🔒CryptoTester v1.7.1.0 for #Ransomware Analysis 🔍
Explicit PKCS #1 vs #8 key exports, Key Finder finds new formats, new encrypt algorithms, endianness flipping (byte/int32/int64), generate ECC keys, new derives (including Tiny-ECDH support), bugfixes.
github.com/Demonslay335/Cryp…
9
25
79
32,500
🔒CryptoTester v1.7.0.0 for #Ransomware Analysis 🔍
Key Finder rewrite, new hashes, derive funcs, algorithms, padding modes, swap Hash and Derive process order, AES-CTR-LE, Encoding Param for RSA... another colossal update to read the changelog on. 😅
github.com/Demonslay335/Cryp…
5
45
121
49,505
🔒CryptoTester v1.6.0.0 for #Ransomware Analysis🔍
Long overdue update with new algorithms, features, hashes, ECDH derives, Key Finder formats, ECC Validator, OAEP paddings... the changelog is 100 lines. 😅
Now hosted on GitHub w/ a readme!
github.com/Demonslay335/Cryp…
6
51
139
46,631
Michael Gillespie retweeted
Here is an excellent writeup written by Claire Levin about an older vulnerable ransomware family called Jaff: clairelevin.github.io/malwar…. She is looking for a summer internship, by the way. So if you like what you read and have any opportunities open, make sure to reach out!
1
13
41
43,164
#DeadBolt #Ransomware Victims, check this site to see if they managed to get your key. Excellent work to the Dutch Police. 👏
deadbolt.responders.nu/
Wij hebben een mooi succes geboekt in de bestrijding van ransomware. Lees meer over hoe wij gedupeerden weer toegang tot hun gegijzelde computerbestanden hebben gegeven. 👇politie.nl/nieuws/2022/oktob… #sHertogenbosch via @Politie
3
15
32
Michael Gillespie retweeted
New #MafiaWare666 #ransomware #decryption tool is now available! The tool and instructions on how to use it are on #AvastDecoded: decoded.avast.io/threatresea… #DontPayUp
22
36
Michael Gillespie retweeted
Check out my analysis of #LockBit #ransomware v2.0 where I analyze all of its functionalities in IDA!
chuongdong.com/reverse%20eng…
h/t to @BushidoToken for the CTI and @demonslay335 for helping with the crypto!
22
205
573
Michael Gillespie retweeted
Stop/Djvu Ransomware (0411); Extension: .fopa; Ransom note: _readme.txt virustotal.com/gui/file/e684… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
1
2
3
Michael Gillespie retweeted
Stop/Djvu Ransomware (0412); Extension: .qbaa; Ransom note: _readme.txt virustotal.com/gui/file/8ed6… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
2
6
Michael Gillespie retweeted
Stop/Djvu Ransomware (0414); Extension: .vtym; Ransom note: _readme.txt virustotal.com/gui/file/440f… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
2
6
Michael Gillespie retweeted
Stop/Djvu Ransomware (0415); Extension: .kqgs; Ransom note: _readme.txt virustotal.com/gui/file/fc6c… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
2
2
3
Michael Gillespie retweeted
Stop/Djvu Ransomware (0418); Extension: ..bpqd; Ransom note: _readme.txt virustotal.com/gui/file/a685… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
2
6
Michael Gillespie retweeted
Stop/Djvu Ransomware (0417); Extension: .xcbg; Ransom note: _readme.txt virustotal.com/gui/file/6ce9… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
4
5
Michael Gillespie retweeted
"Acepy Ransomware" sample: d58379e5e6da8c6a53b39710814563d9c99d011e7a672d16d6e9a520516ee676
@demonslay335
4
11
Michael Gillespie retweeted
Stop/Djvu Ransomware (0419); Extension: .vlff; Ransom note: _readme.txt virustotal.com/gui/file/80b2… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
1
2
6
Michael Gillespie retweeted
.chernobyl extension. Babuk ransomware family. Sample: virustotal.com/gui/file/049e… @JakubKroustek @Amigo_A_ @LawrenceAbrams @demonslay335
2
11
Michael Gillespie retweeted
Stop/Djvu Ransomware (0407); Extension: .fgnh; Ransom note: _readme.txt virustotal.com/gui/file/d892… @struppigel @demonslay335 @Amigo_A_ @LawrenceAbrams @JakubKroustek
1
2
7