Decoder Loop

Decoder Loop

@decoderloop.com

Rust Reverse Engineering Training. Modern programming languages require modern reverse engineers. 🌐 https://decoderloop.com 💻 https://github.com/decoderloop 🐘 https://infosec.exchange/@decoderloop 💼 https://linkedin.com/company/decoderloop/

28 followers11 following49 posts

Decoder Loop
@decoderloop.com

There's still time to sign up for Deconstructing Rust Binaries, starting October 26, at Ringzer0 COUNTERMEASURE! It's 16 hours of fully remote training on how to reverse Rust binaries, using real Rust malware as examples. ringzer0.training/countermeasu... #ReverseEngineering #RustLang #Infosec

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…
Decoder Loop
@decoderloop.com

The schedule for the course is 8am - 12pm Pacific Daylight Time (UTC-7), for 4 days: Monday October 26 to Thursday October 29th, inclusive. Sign up today to get trained on how to tackle all the malware out there now written in Rust! ringzer0.training/countermeasu...

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…
Decoder Loop
@decoderloop.com

Watched the RustConf video, and want to learn more about #reversing Rust binaries? There's still time to sign up for our fully remote 16-hour training, "Deconstructing Rust Binaries", at Ringzer0 COUNTERMEASURE October 26-31! ringzer0.training/countermeasu... #RustLang #ReverseEngineering #Infosec

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…
Decoder Loop
@decoderloop.com

The slides for @cxiao.net's talk at #RustConf 2026, "Reverse Engineering Rust Malware in 2026", are now available! github.com/decoderloop/... The cover image is a painting of Minerva Terrace in Yellowstone National Park, by Thomas Moran, from 1872. #Rust #RustLang #Malware #Infosec #Reversing

github.comGitHub - decoderloop/2026-09-09-rustconf-reversing-rust-malware-in-2026-talk: Slides for the talk "Reverse Engineering Rust Malware in 2026" at RustConf 2026.Slides for the talk "Reverse Engineering Rust Malware in 2026" at RustConf 2026. - decoderloop/2026-09-09-rustconf-reversing-rust-malware-in-2026-talk
Decoder Loop
@decoderloop.com

We've arrived in Montréal for #RustConf! Come find us around the conference for one of these trait table layout reference cards, for all your Rust reversing needs. The best time is right after @cxiao.net's talk "Reverse Engineering Rust Malware in 2026", at 2pm EDT on Wednesday!

Decoder Loop
@decoderloop.com

We'll be here the whole week, including the Workshop day (Tuesday) and the UnConference (Friday) - and of course, on the conference Discord as well! Looking forward to some great conversations about the Rust programming, security, and reverse engineering landscape.

Decoder Loop
@decoderloop.com

The Rust-based backdoor observed in the supply chain compromise of the `arrayref` Rust crate has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #SupplyChain #arrayref

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

AmnesiaStealer, an infostealer for macOS machines, has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #infostealer #AmnesiaStealer

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

Still Toolkit has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... Still Toolkit is notably used against Russian organizations. The dropper that delivers it is written using @tauri.app #rust #malware #infosec #ReverseEngineering #ArmoredLikho #EagleWerewolf #Tauri

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

We've just added these #RustLang #malware samples to the Rust Malware Sample Gallery: 1) JitterDropper 2) A Rust-based clipboard hijacker 3) #IronWorm, a Rust-based infostealer observed in several recent supply chain compromises 4) LabubaRAT github.com/decoderloop/... #infosec #reversing

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

Want to learn how to analyze Rust malware? Sign up for our fully remote training, Deconstructing Rust Binaries, at Ringzer0 this October: ringzer0.training/countermeasu... Early bird pricing ends August 7! #ReverseEngineering #Malware #Infosec #RustLang #Rust #Reversing

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical upskil...
Decoder Loop
@decoderloop.com

We're BACK this fall at Ringzer0 with another round of Deconstructing Rust Binaries! October 26-31, 16 hours of virtual training on reversing Rust binaries. Struggling with Rust malware? This is the course for you. Early bird prices before July 31st! ringzer0.training/countermeasu...

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…

Decoder Loop reposted

RustConf
@rustconf.com

Speaker Spotlight: Cindy Xiao, Security Researcher @ DecoderLoop Rust malware is rising & reverse engineers are scrambling. On Sept 9, Cindy surveys the '26 landscape: techniques, tooling gaps, & how to teach RE in a Rust world. Schedule: sched.co/2KHt7 Register: bit.ly/4eUTQ1g #rustconf

Decoder Loop
@decoderloop.com

Hello! Just a note that our training at @nsec.io this year, Deconstructing Rust Binaries from May 11-13, has been cancelled. @cxiao.net will still be attending NorthSec, so come say hi if you're there! Otherwise, we hope to see you soon at a future training event!

Decoder Loop
@decoderloop.com

We just wrapped up Deconstructing Rust Binaries, our Rust reverse engineering course, at Ringzer0 last week! It was a real pleasure teaching an engaged class. Missed out? We're running Deconstructing Rust Binaries again at @nsec.io in Montreal, May 11-13, in a hybrid format: nsec.io/training/202...

Decoder Loop
@decoderloop.com

This is 3 full days of the first comprehensive course focused solely on reverse engineering Rust binaries, using real Rust malware as practice. Save your spot now! nsec.io/training/202... #rust #rustlang #ReverseEngineering #MalwareAnalysis #malware #infosec

nsec.ioDeconstructing Rust BinariesSince the rise of several Rust-based ransomware families in 2022, Rust has become an increasingly popular language for malware development. New Rust malware families are no longer rare sightings for…
Decoder Loop
@decoderloop.com

Looking for #RustLang samples to practice your reverse engineering skills on? Just since January, we've added samples from 8 different #malware families to the Rust Malware Sample Gallery: github.com/decoderloop/... 1) KCVY OSLOCK Ransomware 2) An unnamed Rust DDoS botnet 3) FunkSec Ransomware 🧵

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

... 4) RustyWater 5) An unnamed Rust-based loader, mimicking a GoToMeeting DLL 6) Marabu Ransomware 7) An unnamed Rust-based keylogger used by SloppyLemming 8) The VENON banker RAT All samples are freely available for download: github.com/decoderloop/...

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

Want to learn how to reverse these? Last chance to sign up for our "Deconstructing Rust Binaries" training, at Ringzer0 next week! ringzer0.training/countermeasu... We're also offering the "Deconstructing Rust Binaries" training at @nsec.io, as a hybrid training in May! nsec.io/training/202...

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…
Decoder Loop
@decoderloop.com

Last day before prices go up for Deconstructing Rust Binaries at Ringzer0, March 23-26! If you've been thinking about this fully remote, 16-hour Rust reverse engineering training: now is the time to book! ringzer0.training/countermeasu... #infosec #ReverseEngineering #rustlang #MalwareAnalysis

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…
Decoder Loop
@decoderloop.com

Just a few weeks left until our training, Deconstructing Rust Binaries, starting March 23 at Ringzer0! This course is for any reverse engineer who needs real techniques for reversing Rust binaries. ringzer0.training/countermeasu... #MalwareAnalysis #RustLang #ReverseEngineering #Reversing

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…
Decoder Loop
@decoderloop.com

Deconstructing Rust Binaries @ Ringzer0 is 16 hours of fully remote training, 4 hours each day x 4 days, March 23-26. Prices go up March 8, so reserve your spot now! ringzer0.training/countermeasu... #MalwareAnalysis #Rust #RustLang #ReverseEngineering #Reversing #Infosec

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical…
Decoder Loop
@decoderloop.com

Come check out our Deconstructing Rust Binaries training at NorthSec (or remote) this year! Three whole days of Rust reversing.

NorthSec@nsec.io

🏋️ 𝗡𝗼𝗿𝘁𝗵𝗦𝗲𝗰 𝟮𝟬𝟮𝟲 𝗙𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻𝘀/𝗧𝗿𝗮𝗶𝗻𝗶𝗻𝗴𝘀 (5/12): "Deconstructing Rust Binaries" 𝗽𝗮𝗿/𝗯𝘆 Cindy Xiao 📅 Dates: May 11, 12 and 13, 2026 (3 days) 📊 Difficulty: Medium 🖥️ Mode: Hybrid (on-site & remote) 🔗 Training details: nsec.io/training/202... #NorthSec #cybersecurity #malwareanalysis #reverseengineering

Decoder Loop
@decoderloop.com

RustyWater (aka RUSTRIC, Archer RAT) has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #MuddyWater

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

A new Rust DDoS Botnet family has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... This family is unnamed, but was analyzed in this article by Beelzebub: beelzebub.ai/blog/rust-dd... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #botnet

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

A few key things about Deconstructing Rust Binaries: 1) No previous experience with reversing Rust binaries, or writing Rust code, is required! 2) The course will use Binary Ninja as the primary reverse engineering tool. You will be provided a Binary Ninja student license as part of the course!

Decoder Loop
@decoderloop.com

📣🦀 Announcing: TWO 2026 sessions for our Rust reverse engineering course, Deconstructing Rust Binaries! 1) Ringzer0 COUNTERMEASURE, March 23-26, Remote: ringzer0.training/countermeasu... 2) NorthSec (@nsec.io), May 11-13, Montréal & Remote: nsec.io/training/202... #malware #infosec #rustlang

ringzer0.trainingDeconstructing Rust BinariesDeconstructing Rust Binaries is the first comprehensive training course focused solely on reverse engineering Rust binaries. This course is for any reverse engineer who needs a rapid, practical upskil...
Decoder Loop
@decoderloop.com

Deconstructing Rust Binaries is the first comprehensive course focused *solely* on reverse engineering Rust binaries. You will learn how to effectively triage Rust binaries, how to trace data flow through Rust binaries, and how to tackle common techniques found in the Rust malware ecosystem.

Decoder Loop reposted

Cindʎ Xiao 🍉
@cxiao.net

Excited to bring Deconstructing Rust Binaries to NorthSec in March! Chat with me here or at @decoderloop.com if you have questions about the training. Take advantage of the early bird rate for the onsite option! Pricing is in CAD, take advantage of the exchange rate (: nsec.io/training/202...

nsec.ioDeconstructing Rust Binaries
NorthSec@nsec.io

➡️ Deconstructing Rust Binaries Cindy Xiao ➡️ Reverse, Bypass, Exploit: Mobile Hacking Workshop David Baker & Steven Smiley (CORRELIUM) ➡️ Offensive Development Practitioner Certification (ODPC) Munaf Shariff (White Knight Labs)

Decoder Loop
@decoderloop.com

The last time the Sample Gallery was updated was in January 2024 (~2 years ago). Since then, there's been an explosive growth in new Rust malware, including: SPICA, KrustyLoader, RustDoor, SSLoad, Fickle Stealer, Cicada3301 Ransomware, RustyClaw, Embargo Ransomware, (cont'd - there's too many!)

Decoder Loop
@decoderloop.com

...RustyAttr, Akira Ransomware (both Akira_v2 and Megazord), Banshee (Rust variant), RALord Ransomware, RustoBot, Tetra Loader, EDDIESTEALER, Myth Stealer, Rustonotto, RustyPages, ChaosBot This is ~1 new Rust malware family per month. Rust as a programming language for malware is here to stay!

Decoder Loop
@decoderloop.com

🦀 Looking for Rust malware samples to practice analyzing? Our Rust Malware Sample Gallery just received a major update, with 20 new families added! github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

The Sample Gallery collects links to articles about malware written in Rust, organizes them by family, and includes a download link to a publicly available sample for every malware family. This is for any malware analyst who wants to get hands-on with real Rust malware. github.com/decoderloop/...

github.comGitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
Decoder Loop
@decoderloop.com

Thank you for your interest in Decoder Loop & #rustlang reverse engineering training so far! This Friday, November 7th, join us at Ringzer0 COUNTERMEASURE, in Ottawa, Canada, where @cxiao.net will present the workshop "Reversing a (not-so-) Simple Rust Loader": ringzer0.training/countermeasu...

ringzer0.trainingWORKSHOP: Reversing a (not-so-) Simple Rust Loader // Cindy XiaoRust can be challenging for even experienced reverse engineers. We will reverse a simple Rust malware loader found in the wild with obfuscated strings and a decoy payload, making it a good example for...
Decoder Loop
@decoderloop.com

By the end of this workshop, you should know where to get more information about Rust structures and types, know a few tricks for finding interesting landmarks in Rust binaries, and be much more confident in approaching Rust binaries! #rustlang #MalwareAnalysis #ReverseEngineering #infosec