Fall 2024: Hunting Trojans in PyPI, Stanislav Rakovsky
A presentation from the large SPbCTF meeting at the Yandex office (https://vk.com/spbctf)
Stas spoke about the prevalence of malware that typosquats packages in the PyPI repository. The presentation explored the obfuscation used by malicious packages and methods for combating it: from AST transformers to machine learning.
Presentation → https://drive.google.com/file/d/18POJ...
Want to learn how to reverse engineer but don't know where to start? We have a course for beginners → https://rev-kids20.forkbomb.ru/tasks
0:00 Malware packages in PyPI repos
10:05 Obfuscation and deobfuscation
27:47 Detecting malicious activity
40:11 Using machine learning
44:40 How to protect yourself
51:27 Questions