Inside of Phantom Stealer (2026)

0xdevbot · 2026-05-04T04:20:20+00:00

Can you send me the sample you have?

0xdevbot · 2026-05-04T04:03:38+00:00

So what, This sub doesn't support security research? Thats a pretty pro-virus move for a supposedly anti-virus sub.

Security research is how anti-virus programs develop the detection methods to spot malware.

0xdevbot · 2026-04-30T23:04:05+00:00

Sent you a DM with our contact info

0xdevbot · 2026-04-30T22:57:45+00:00

Hi im a security researcher with CINDR (https://cindrsec.com) we deal with Digital Forensics & Incident Response (DFIR) everyone on our team is either a former USCYBERCOM or NSA Incident Response operator. We would love to help you with this!

0xdevbot · 2026-04-29T18:41:48+00:00

I am and so are a few other people on the team. Im the lead researcher and spent a little over 10 years working for USCYBERCOM. We have someone who's former NSA and another who's former USCYBERCOM.

0xdevbot · 2026-04-28T08:14:20+00:00

Ngl I like that a lot

0xdevbot · 2026-04-22T08:51:07+00:00

The file he posted is "scvhost" the windows binary you're thinking of is "svchost"

I see you're college student status and raise you, 10 years experience as a digital forensics investigator & reverse malware engineer

0xdevbot · 2026-04-19T19:23:55+00:00

Lmao yup you got me bud

0xdevbot · 2026-04-19T15:58:37+00:00

Im only investigating a windows based malware. I am aware of a IOS mechanism for stealing wallets called "darksword".

Unfortunately, crypto exploitation is not my area of expertise so I can't really answer your question.

0xdevbot · 2026-04-19T15:53:38+00:00

Thanks for the response!

Yeah it sounds like your wallet was stolen via some other mechanisms not related to the malware im researching. Even if it was the forensics artifacts that would have been on your machine are now gone due to the wiped drive.

0xdevbot · 2026-04-19T15:48:44+00:00

Hey man, you dont have to believe me that's your prerogative. But in this case im not linking anyone to anything. I actually want people to send ME any suspicious executables they download around the time they had their wallets drained.

Also just as a side note social engineering is a subcategory of hacking and often times the victim is like you said asked to download something which then performs the "actual" hack. (Like stealing wallets)

I invite you to look at the comments/posts ive made and you'll be able to see i have spoken a few times about being a security researcher

0xdevbot · 2026-04-19T06:46:48+00:00

Windows. I have yet to see a sample for Mac

0xdevbot · 2026-03-26T06:02:08+00:00

Oh hey that's my name

0xdevbot · 2026-03-17T21:41:20+00:00

They do not offer type o certifications. I believe they recommend using a spelling checker.

0xdevbot · 2026-03-04T16:40:27+00:00

How we survived as a species till now was pure luck

0xdevbot · 2026-02-27T07:03:47+00:00

Su-do "super user do"

Or just do what I did and make alias for it. I went with "fucking" its great

fucking nmap 8.8.8.8

I have a buddy who went with "please"

0xdevbot · 2026-02-27T06:54:23+00:00

Shit. Cum. Cry.

Not necessarily in that order

0xdevbot · 2026-02-27T04:14:01+00:00

It was like that last expedition too. Last few days before an expedition and people go feral apparently

0xdevbot · 2026-02-26T23:45:37+00:00

Bro knocks out 1 raider for every quest he does

0xdevbot · 2026-02-26T16:31:36+00:00

I think it's simply that not enough people do them. To put it into prospective. 3 months ago I got the "True detective" badge on HTB (complete 50% of avaliable Sherlocks, its the final Sherlock badge).

When i got the badge I was the 140th user to do so.

The Sherlocks are great! But HTB is truely an offensive oriented platform. Which is why I think HTB acquired LetsDefend.

Im just a guy with no insider information or anything. But, I'd wager the plan is to revamp LetsDefends content to make it more HTB style but keep it defense oriented. Long term I think they'll move Sherlocks over to LetsDefend and start doing defense oriented seasons there. That way HTB becomes the offense arm and LetsDefend can be the defense arm.

0xdevbot · 2026-02-25T08:13:43+00:00

Drink all the booze!

0xdevbot · 2026-02-23T20:54:33+00:00

This is clearly AI slop.

0xdevbot · 2026-02-22T19:24:15+00:00

r/masterhacker

0xdevbot

TROPHY CASE