5 ms·
This is a very interesting article, and it is somewhat surprising to see Python entering the malware space more in recent years. Other compiled languages with s
by easterncalculus 6y ago
This is a very interesting article, and it is somewhat surprising to see Python entering the malware space more in recent years. Other compiled languages with sophisticated runtimes and cross platform support fit in quite well (Go especially) but to see Python is quite interesting. I guess these actors are at a point where they can churn it out relatively quickly, and are not too worried about the code being reversed rather trivially.
What I'd want to learn more about is whether or not these Python samples tend to be very large (in terms of actual code, and not just language internals/pyinstaller/boilerplate). I expected the real life samples to be smaller than some of the larger botnets and the like written in these compiled languages, but some of the ones you go in depth on are somewhat surprising.
- tyingq 6y agoIt's not malware, of course, but the way Dropbox was able to obscure its use of python was interesting and pretty similar to me. https://www.anvilventures.com/blog/looking-inside-the-box.html https://www.anvilventures.com/blog/looking-inside-the-box.ht... In short, they shipped a python interpreter that understood rc4 encrypted pyc/opcode files.
- staticassertion 6y agoFor what it's worth Go is also gaining traction, from what I can tell. Malware authors do not appear to be particularly afraid of trying new languages.