MatheuZ @MatheuzSecurity

Red Team Operator, Cyber Threat Intelligence, Malware Researcher github.com/MatheuZSecurity Brazil Joined September 2020

Tweets

716
Followers

2K
Following

362
Likes

1K

MatheuZ @MatheuzSecurity

a day ago

I analyzed Trend Micro Deep Security Agent for Linux and found that a local event storm can force bmhook/tmhook reload cycles, opening a repeatable temporary protection bypass window. Full write-up: matheuzsecurity.github.io/hacking/trendm… #linux #edr #rootkit #cybersec #security #research

1 16 35 2K 15

View Details

MatheuZ @MatheuzSecurity

a week ago

Linux Kaspersky 0day: unloading LKMs directly from userspace. Kaspersky rejected my report, so I'll be publishing the full technical write-up soon #Linux #Kernel #0day #VulnerabilityResearch

5 78 445 30K 165

View Details

Phrack Zine @phrack

a week ago

We're looking for a cover for the next issue of Phrack! Retro sci-fi, terminals, dystopian systems, chrome futures, hacker manuals from an alternate timeline. Make something timeless and strange. Send your work or idea to [email protected] Deadline June 30th

4 41 123 11K 21

View Details

tmp.0ut @tmpout

2 weeks ago

Reminder that our CFP is still running! 🔥 Including the Rootkit Competition

tmp.0ut @tmpout

5 months ago

We are excited to announce the CFP for the next tmp.0ut Volume 5! tmpout.sh/blog/vol5-cfp.…

1 49 122 25K 27

0 12 31 4K 6

View Details

Phrack Zine @phrack

2 weeks ago

Phrack wants your art! The theme for this issue is retro sci-fi / old-school cybernetic futures. CRT glow, vector grids, space paranoia, BBS aesthetics, analog cyberpunk, forgotten futures. But we accept all kinds of contributions :) ANSI, illustration, collage, renders, weird experiments. Send it to: [email protected] Deadline June 30th

2 45 118 7K 39

View Details

Extencil @extencil

2 weeks ago

LLMs told me that @MatheuzSecurity created a open-source Linux kernel rootkit called "Singularity". You should take look: github.com/MatheuZSecurit…

1 2 6 576 1

View Details

MatheuZ @MatheuzSecurity

2 weeks ago

@extencil Check out the Singularity rootkit guys😂🤣

0 0 1 71 0

View Details

MatheuZ @MatheuzSecurity

a month ago

@heyZeus131313 You're mixing unrelated things. Residential proxies explain IP origin, not who wrote the code. The rootkits mentioned are Brazilian, and there are others as well this is about authorship and technical scene, not attack location.

1 0 3 248 0

View Details

MatheuZ @MatheuzSecurity

a month ago

Brazil is a Linux kernel rootkit factory. Diamorphine, Brokepkg, KoviD, Reptile and now Singularity. Some of the most well-known Linux kernel rootkits came from Brazilian researchers. Brazil has a crazy strong scene in linux rootkit development

22 109 1K 44K 356

View Details

MatheuZ @MatheuzSecurity

a month ago

@NoirBurner Thank you very so much!

0 0 0 14 0

View Details

MatheuZ @MatheuzSecurity

a year ago

github.com/MatheuZSecurit… Hey guys, I posted a really cool zine in pure TXT about Unhooking Linux EDR, attacking the cleanup_module function, to be able to remove any hook from an EDR for example. Feel free to read.

5 47 177 15K 93

View Details

MatheuZ @MatheuzSecurity

a month ago

@duket2122 I've spoken with the creators of Kovid, Diamorphine, and Brokepkg. Reptile's creator is Brazilian and has even spoken at a Brazilian conference. Do some research or get basic knowledge before giving your opinion Furthermore, I am the creator of Singularity and I am Brazilian :)

2 0 5 179 0

View Details

MatheuZ @MatheuzSecurity

a month ago

@duket2122 lol are you completely delusional?

1 0 6 541 0

View Details

MatheuZ @MatheuzSecurity

a month ago

@who1sroot Yes, you can find a repository with the Reptile files here: codeberg.org/hardenedvault/… Github was taking down several repositories a while back, so I think it's a good idea to take projects from GitHub and upload them to a Gitea instance to avoid "disappearing from the internet".

1 0 7 831 4

View Details

MatheuZ @MatheuzSecurity

a month ago

@Vindix007 That's a different discussion though. I'm talking about Linux kernel rootkit research, not desktop OS popularity. And even on Windows, Brazil has had a strong offensive security scene for a long time.

0 0 8 126 0

View Details

MatheuZ @MatheuzSecurity

a month ago

@m0nadlabs That's very interesting, I'll take a look

0 0 1 65 0

View Details

Anderson Nascimento @andersonc0d3

a month ago

Brokepkg and Kovid? Never heard of them. I also had written one for FreeBSD, probably way before those ones you mentioned. I had implemented hooking via debug registers, keylogger through the keyboard driver and some other features. It was a nice project to tinker with computers back then. :) Rootkits em kernel space - Redshift, um rootkit para o kernel do FreeBSD pt.slideshare.net/slideshow/root…