Malware on MEISTSEChttps://6aa388fd.meistsec-blog.pages.dev/tags/malware/Recent content in Malware on MEISTSECHugoen-usFri, 10 Jul 2026 00:00:00 +0000Building a Professional KVM Malware Analysis Lab on Linuxhttps://6aa388fd.meistsec-blog.pages.dev/posts/malwarelab/Fri, 10 Jul 2026 00:00:00 +0000https://6aa388fd.meistsec-blog.pages.dev/posts/malwarelab/A complete walkthrough of building a production-grade malware analysis environment using KVM, PFSense, Remnux, FLARE-VM, Mullvad WireGuard VPN, mitmproxy TLS interception, and Wazuh SIEM — inspired by c3rb3ru5d3d53c's approach.How I Hunted the Atomic Arch AUR Stealer on My Own Boxhttps://6aa388fd.meistsec-blog.pages.dev/posts/arch_threat_hunt/Mon, 15 Jun 2026 00:00:00 +0000https://6aa388fd.meistsec-blog.pages.dev/posts/arch_threat_hunt/When 400+ Arch AUR packages got hijacked to drop a Rust credential stealer with an optional eBPF rootkit, I ran the full hunt against my own Arch box. Spoiler: clean — but two checks looked like hits and weren't, providing a good lessons learned experience.Approaching the Attack Chainhttps://6aa388fd.meistsec-blog.pages.dev/posts/attackchain1/attackchain/Thu, 25 May 2023 15:02:43 -0500https://6aa388fd.meistsec-blog.pages.dev/posts/attackchain1/attackchain/Phase 1Practical Malware Analysis & Triagehttps://6aa388fd.meistsec-blog.pages.dev/posts/pmat/pmat/Thu, 01 Sep 2022 15:02:43 -0500https://6aa388fd.meistsec-blog.pages.dev/posts/pmat/pmat/PMAT Sample Analysis