Germany

Frank Boldewin

Elite
@fboldewin

Reverser, Malware Researcher, Threat Intelligence dude, focused on hunting APTs targeting the financial industry. Follow me on Twitter @r3c0nst

twitter.com/r3c0nst

COM-Code-Helper. Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code

184

ATM-Jackpotting-P4WNP1-style-with-malware-XFS_DIRECT. Analysis of the XFS_DIRECT ATM malware used for jackpotting with a PI ZERO W and the P4WNP1 framework on board

168

ATM-Hacking-ISC2018. Slides from my talk at ISC 2018 in Beijing 2018

96

YARA_Detection_Engineering. Detection Engineering with YARA

88

YARA-rules. Some YARA rules i will add from time to time

70

ATMMalScan.

56

misc_malware. Python

38

reconstructer.org. Legacy repo of my discontinued reconstructer.org website with tools and papers from 2006 - 2013

37

FastCashMalwareDissected. Operation Fast Cash - Hidden Cobra‘s AIX PowerPC malware dissected

26

MacGyver-s-return---An-EMV-Chip-cloning-case. Slides from my Area41 security conference talk in Zurich/CH

20

When-ransomware-hits-an-ATM-giant---The-Diebold-Nixdorf-case-dissected. When ransomware hits an ATM giant - The Diebold Nixdorf case dissected - Group-IB CyberCrimeCon2020

6

Libertad-y-gloria---A-Mexican-cyber-heist-story---CyberCrimeCon19-Singapore. Libertad y gloria - A Mexican cyber heist story - CyberCrimeCon19 Singapore

6

Empowering-CTI-with-AI-in-practice.

4

tools. Tools I have written for malware analysis

3

CAPA_RULES. My personal CAPA rules

3
15
Apply