nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqwcefa8lsnemf4xyxs5hckqpds9pvtyqajwzz8q30prjwm2ee0sjs0tvlzd (nprofile…vlzd) Nice work dude! I assume this locks down the ABE bypasses that work via injecting into the broker and hijacking the COM session?
Does it also apply to Chrome processes launched via CreateProcess suspended for process hollowing purposes?
Marcus Hutchins :verified:
npub1t5…338yv
2026-05-08 06:09:57 UTC
in reply to nevent1q…83da
Author Public Key
npub1t5y3qpya5m4v4tv73yw447uglfsn7j44znv2d38m2xsrah4kpm0qt338yvPublished at
2026-05-08 06:09:57 UTCEvent JSON
{
"id": "6b8b27a11fc0142b1ea99dda8552f28ef345b2274615d98a40695e1eb7c1a4a1",
"pubkey": "5d0910049da6eacaad9e891d5afb88fa613f4ab514d8a6c4fb51a03edeb60ede",
"created_at": 1778220597,
"kind": 1,
"tags": [
[
"p",
"76329e9ff09e769a9886852f8b002d8142c5901d938423822f08e4edab397c25",
"wss://relay.ditto.pub"
],
[
"p",
"6f6e2835a06c7ab7959b775f3d26aaf4760814304857e8c78cc32bef7bd4dffe",
"wss://relay.ditto.pub"
],
[
"e",
"9fde7291e2a489811e1ae0c5c06f03325f2c6bdb429f55c5bdaf687304c544bd",
"wss://relay.ditto.pub",
"reply"
],
[
"proxy",
"https://infosec.exchange/users/malwaretech/statuses/116537465086907095",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqwcefa8lsnemf4xyxs5hckqpds9pvtyqajwzz8q30prjwm2ee0sjs0tvlzd Nice work dude! I assume this locks down the ABE bypasses that work via injecting into the broker and hijacking the COM session? \n\nDoes it also apply to Chrome processes launched via CreateProcess suspended for process hollowing purposes?",
"sig": "fb525c54faf4c5205bd0d25eecc21f272e2a63f2993a18ab8fdaa23be7faff5ae977be231fb6cc4bda3e206a99fdb81c86dddc9f4ef6a80c264593d9f797f3c9"
}