Archive

2026  6

July  4

Hijacking AI Agents, Part 2: Anatomy of a Hijack

July 27, 2026 · 7 min · 1365 words · Melted in Hex

Hijacking AI Agents, Part 1: The Trust Bug

July 27, 2026 · 6 min · 1136 words · Melted in Hex

Hiding in Plain Ledger: Four Months of a ClickFix Operator’s Blockchain C2

July 16, 2026 · 12 min · 2369 words · Melted in Hex

AnalystAIPack: Giving an AI Agent a Malware Analyst’s Working Knowledge

July 1, 2026 · 5 min · 1041 words · Melted in Hex

June  2

Dead Drops on the Blockchain: Reversing a DPRK npm Loader (PolinRider / A6-Shadow-15)

June 22, 2026 · 23 min · 4692 words · Melted in Hex

Peeling the Sandworm: Reversing the nhmpy PyPI Supply-Chain Worm (Shai-Hulud / Hades Wave)

June 14, 2026 · 18 min · 3694 words · Melted in Hex

2019  1

January  1

A new MuddyWater APT campaign spreads Backdoor RAT

January 11, 2019 · 5 min · 886 words · Melted in Hex

2018  1

October  1

Flare-On Challenge 2018 Writeup

October 1, 2018 · 5 min · 917 words · Melted in Hex

2017  6

December  3

Analysis of Noblis In-dev Ransomware

December 13, 2017 · 4 min · 754 words · Melted in Hex

Analysis of File-Spider Ransomware

December 11, 2017 · 9 min · 1858 words · Melted in Hex

Analysis of LockCrypt ransomware

December 1, 2017 · 5 min · 962 words · Melted in Hex

October  1

Flare-On Challenge 2017 Writeup

October 15, 2017 · 8 min · 1555 words · Melted in Hex

August  1

Reverse Engineering of Python built executables

August 1, 2017 · 5 min · 995 words · Melted in Hex

January  1

Distributed processing using celery in python

January 12, 2017 · 4 min · 801 words · Melted in Hex

2016  1

June  1

Analysis of Ransomware spread by JavaScript

June 6, 2016 · 4 min · 715 words · Melted in Hex