サイバーカイダ - Twitch Threat Hunting and Malware analysis! Let's hunt some malware

Threat hunting and malware analysis live! Let's find these naughty malware authors!

twitch.tv/cyberkaida

#VTuber #Malware #ReverseEngineering #ThreatHunting #URLScan #Ghidra

Twitch Twitch is the world

Let's play #Marathon! Live now with @exandyr.bsky.social !

twitch.tv/cyberkaida

#VTuber #Cyberpunk #VTuberUprising

Teto?

OK! The sourceforge page hosting QuasarRAT is now down 🎉

urlscan.io/result/019c3...

A takedown request is now submitted for their other infrastructure. Most of the GitHub hosted command and control is gone after the takedown request (thank you @github.com !)

#QuasarRAT #TakeDown #Malware

Let's find more QuasarRAT infrastructure! Live now threat hunting!

twitch.tv/cyberkaida

#Malware #QuasarRAT #VTuber #ReverseEngineering #Threathunting #ReVa

I've just updated Spout2PW with Steam Flatpak support! ✨️

I also added a lot more detail and screenshots to the documentation, to make it as user-friendly as possible 🩵

github.com/hoshinolina/...

Twitch Twitch is the world

Time to try Warframe for the first time with @booooberrie.bsky.social and @felfoxling.bsky.social !

twitch.tv/cyberkaida

#VTuber #WarFrame

Live now hunting the QuasarRAT malware! In the last stream we got their command and control taken down!

bsky.app/profile/cybe...

twitch.tv/cyberkaida

#malware #VTuber #Ghidra #ThreatIntel #QuasarRAT

QuasarRat payload is hosted on SourceForge

- hxxxs://sourceforge[.]net/projects/fluid-draw/

and more old C2 on @github.com
- github.com/cemugen/

#QuasarRat #Stealer #Payload #Malware

@github.com has been hosting QuasarRat command and control for a few years.

- github.com/htmlacc
- github.com/wdkjservice
- github.com/software016378

These are taken down:
- github.com/n16h70wx
- github.com/frngdev/

#Malware #Stealer #QuasarRat #GitHub #C2

Searching for more samples of this now on Twitch!

twitch.tv/cyberkaida

#Malware #Stealer #VTuber #Ghidra

Continuing this analysis! Let's look at the next stage GoLang payload and the GitHub staging.

twitch.tv/cyberkaida

#Ghidra #Malware #ReverseEngineering #VTuber

Live2D optimization guide Page 1: Avoid one massive parts folder

Live2D optimization guide Page 2: Hide deformers you don't need and embrace blendshapes/glue

Live2D optimization guide Page 3: Lower display quality and layout your atlas manually

Live2D optimization guide Page 4: Restart your Live2D and prioritize bigger RAM then CPU for upgrading path.

Reposting my #Live2D "survival" guide here for working with big models
From working on a gaming PC to a Macbook with 16 GB of RAM, both giving me around 45 FPS in average while working in Editor.

#2025年自分が選ぶ今年の4枚

CyberKaida punching the viewer

Thank you so much @suke.kawaii.social for the cute sticker! I love it!

#VTuber #Sticker

This malware uploads to `ftp[.]hpdataserver[.]altervista[.]org` with hardcoded username/password.

urlscan.io/result/019b6...
www.virustotal.com/gui/url/db81...

The malware is a 500MB pyinstaller. It contains 3 .mp4 files that are actually AES encrypted python scripts. The password is `joogl3epdx4`. The malware installs to `%LOCALAPPDATA%\Alexa\Virtual\`. It takes screenshots and steals Discord tokens and wallet files.

#Malware #Stealer #PyInstaller

A screenshot of The Pink Valley on SourceForge. This is a malicious project.

Fake Doom WADs that are actually malware hosted on SourceForge almost got my friend.

Please be careful downloading mods as a streamer!

urlscan.io/result/019b5...
app.any.run/tasks/200a70...
www.virustotal.com/gui/collecti...

#Doom #Malware #ReverseEngineering #VTuber

サイバーカイダ - Twitch Hi! I'm CyberKaida, I stream reverse engineering and InfoSec stuff! I’m a cyber dragon VTuber from cyberspace here to teach meatspace humans about computers!

Let's explore the new features in Ghidra 12, then do some extension development!

twitch.tv/cyberkaida

#Ghidra #ReVa #Live #VTuber #Malware #ReverseEngineering

trying very hard not to sad post and bitch and moan, but uugh, the inability to even focus for more than 5m on *any* task is making that *really* hard right now.

I just want to be able to work on things T~T

Twitch Twitch is the world

Time to hack the planet! Let's play hackmud!

#hackmud #VTuber

twitch.tv/cyberkaida

comparison between apple's finder icon and mine. apple's is the split blue and white smiley face, mine is two blue and white anime girls making out

comparison between discord's icon and mine. mine is like a screaming cat on a blue/purple slimy background

comparison between celsys's clip studio paint icon and mine. mine is similar but rotated with some comic styling and pink and blue highlights

comparison between mozilla's firefox icon and mine. mine is similar but looks closer to the old firefox icon and brings back the little arm and gives the fox a cute little smiley face

last week i remembered that macOS lets you set your own icons and that *I* have the power to delegitimize the professionalism of the software that runs on my machine, so here's a thread of the 16 new icons i've made so far

i really forgot how fun it was to just sit down and make art for myself :')

I like this energy 😆

#oc

I love you @kestayrt.bsky.social thank you so much!!!

I love it @oshiixing.bsky.social!!

Friendsgiving Day 22

Cyber, one of my first friends and people i met in my vtubing start xD she is so freaking smart. makes me wanna be as smart as she is.. Whenever i need help i go straight to her or someone else cause timezones suck. @cyberkaida.bsky.social

🎨: @oshiixing.bsky.social

サイバーカイダ - Twitch ReVa time! Let's automate Ghidra!

Live now working on ReVa and Ghidra automation! WoW with @felfoxling.bsky.social later!

twitch.tv/cyberkaida

#ReVa #Ghidra #Malware #ReverseEngineering #WoW #FelFoxlingIsCute

Twitch Twitch is the world

ReVa automated RE 6.0 release today! Let's do some demos and deploy live on stream!

- Headless/Automatic mode
- Claude plugin
- Binary version control
- Better datatype reconstruction

and more!

twitch.tv/cyberkaida

#Ghidra #ReVa #RE #Automation #Malware #CTF

Twitch Twitch is the world

Let's try Ghidra development with the new Claude Code Web!

#Ghidra #Claude #VTuber #ReverseEngineering

twitch.tv/cyberkaida

サイバーカイダ - Twitch Malware analysis and threat hunting with Ghidra!

Malware analysis and threat hunting live!

twitch.tv/cyberkaida

#Ghidra #Malware #ThreatHunting #ReVa #VTuber