Risky Business Features
Hunting software supply chain malware
Sponsors in this episode
No sponsor reads found in this episode's notes.
Host-read ads that the notes don't mention can't be found this way.
Show notes
In this podcast episode, OpenSourceMalware founder Paul McCarty joins James Wilson to explain how researchers find and analyse malicious packages, GitHub repositories and developer tools.
Paul walks James through static analysis, deobfuscation and reconstructing multi-stage kill chains to identify what attackers are trying to steal. They also discuss how LLMs make malware development easier while introducing operational security mistakes.
The pair examine DPRK tradecraft, blockchain-based payload delivery and what Paul calls Pollen Rider, which can reinfect developers through their own repositories.
Show notes
From the show's RSS feed.