Python malware on the rise

Re:Python malware on the rise by vesche on Monday July 13, 2020 @04:15PM (#23825114)

Author here. The obfuscated code example was to show what a malware author might do to make malware analysis of a Python "compiled" binary more difficult. The code might be obfuscated & turned into an executable before deployed.

As far as the opencv library goes, used by PoetRAT, you can choose to bundle third party packages inside your executable with all the executable generators I mentioned at the beginning of the article like PyInstaller or Nuitka.

[ Parent | on HN ]

Re:Python malware on the rise by neatze on Monday July 13, 2020 @04:25PM (#23825232)

Thanks for article and explanation I am less confused now.

I wonder how large malware payload size will be when packaged with open-cv :)

[ Parent | on HN ]

Re:Python malware on the rise by vesche on Monday July 13, 2020 @04:33PM (#23825284)

They can get really large, especially if it's a dependency that has many dependencies itself! Glad you enjoyed it, thanks so much for reading.

[ Parent | on HN ]

Re:Python malware on the rise by theturingnerd on Monday July 13, 2020 @04:25PM (#23825224)

Quality work! Sidebar, it's crazy to see you on the front page of HN; hope you're doing well man! --t--

[ Parent | on HN ]