Decoder Loop

The recording for 💻 Cindy Xiao's talk at RustConf, "Reverse Engineering Rust Malware in 2026", is now up! https://lnkd.in/gFmqNXsS Watched the RustConf video, and want to learn more about reversing Rust binaries? There's still time to sign up for our fully remote 16-hour training, "Deconstructing Rust Binaries", at Ringzer0 COUNTERMEASURE October 26-31! https://lnkd.in/gAtjFpA9 #Rust #RustLang #ReverseEngineering #RustConf #RustConf2026 #Reversing #Infosec

The slides for 💻 Cindy Xiao's talk at #RustConf 2026, "Reverse Engineering Rust Malware in 2026", are now available! https://lnkd.in/gFRu-p_E Thank you to everyone who attended, either live or via the stream, and for all the great conversations afterwards! The cover image is a painting of Minerva Terrace in Yellowstone National Park, by Thomas Moran, from 1872. #Rust #RustLang #RustConf2026 #Malware #MalwareAnalysis #infosec #ReverseEngineering #reversing

We've arrived in Montréal for #RustConf! Come find us at the conference for one of these trait table layout reference cards, for all your Rust reversing needs. The best time is right after 💻 Cindy X.'s talk "Reverse Engineering Rust Malware in 2026", at 2pm EDT on Wednesday! We'll be here the whole week, including the Workshop day (Tuesday) and the UnConference (Friday) - and of course, on the conference Discord as well! Looking forward to some great conversations about the Rust programming, security, and reverse engineering landscape.

We'll be at Rust Foundation's RustConf in 2 weeks! Come join 💻 Cindy X. for her talk, "Reverse Engineering Rust Malware in 2026", on Wednesday September 9! Can't make it to Montreal? You can still get a virtual, pay-what-you-want ticket! The virtual ticket gets you access to the conference livestream and the Discord chat. Register here: https://bit.ly/4wwduG6 #rustconf #rustconf26 #rustlang #rustfoundation

🦀🥷 We've released a Binary Ninja plugin, Rust Metadata Carver, that extracts panic metadata from Rust binaries: https://lnkd.in/gh3iNiFV Panic metadata in Rust binaries reveals the libraries used, the version of Rust used, and code locations from the original Rust source, down to the line numbers! This is very useful for finding the key functionality in a binary. The plugin extracts that metadata, labels the original source file locations, and groups them into Tags (labelled with the 😱 emoji). You can find information about the machine the binary was built on as well. For example, the Linux backdoor payload from the recent #arrayref supply chain compromise has the Cargo home path of `/home/kali/.cargo/` from the developer's machine. Panic metadata is really useful for navigating through library code, because you can find exactly what line of source code from the original library corresponds to a particular location in the binary. For example, one location in the arrayref backdoor Linux binary was originally from reqwest version 0.12.28, source file `src/connect[.]rs`, line 783. Here it is in the reqwest source code! https://lnkd.in/gfPse65p Give the Rust Metadata Carver plugin a try! You can find it on the Binary Ninja plugin manager (via Plugins > Manage Plugins). If you want to learn more about how panic metadata in Rust binaries works, our founder 💻 Cindy X. 's writeup from 2023 has the details: https://lnkd.in/gEZQFjVY And of course, if you'd like to dive even deeper into Rust reversing techniques: Join us for fully remote Rust RE training October 26-31, where we'll be teaching our 16-hour course, Deconstructing Rust Binaries, at Ringzer0 Training: https://lnkd.in/gAtjFpA9 Happy reversing! #ReverseEngineering #MalwareAnalysis #infosec #malware #reversing #rust #rustlang #BinaryNinja

The Rust-based backdoor observed in the supply chain compromise of the `arrayref` Rust crate has been added to the Rust Malware Sample Gallery: https://lnkd.in/g7biktKz #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #SupplyChain #arrayref

AmnesiaStealer, an infostealer for macOS machines, has been added to the Rust Malware Sample Gallery: https://lnkd.in/gNb6Cmyg #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #infostealer #AmnesiaStealer 

Still Toolkit has been added to the Rust Malware Sample Gallery: https://lnkd.in/gAUZrzhK Still Toolkit is notably used against Russian organizations. The dropper that delivers it is written using Tauri, a Rust framework for building applications using web technologies. #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #ArmoredLikho #EagleWerewolf #Tauri

We've just added these Rust malware samples to the Rust Malware Sample Gallery: 1) JitterDropper 2) A Rust-based clipboard hijacker used in a "Ghost Network" malware distribution campaign 3) #IronWorm, a Rust-based infostealer observed in several recent supply chain compromises 4) LabubaRAT https://lnkd.in/gCkVFncR Want to learn how to analyze these samples? Sign up for our fully remote training, Deconstructing Rust Binaries, at Ringzer0 Training this October: https://lnkd.in/gAtjFpA9 Early bird pricing ends August 7! #infosec #reversing #RustLang #Rust #Malware #MalwareAnalysis

We're BACK this fall at Ringzer0 Training, with another round of Deconstructing Rust Binaries! October 26-31, 16 hours of virtual training focused solely on reversing Rust binaries. Struggling with Rust malware? This is the course for you. Get your early bird registration in before July 31st! https://lnkd.in/gAtjFpA9 #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing