pwoyke

4 ms·

1. 1.▲
   by pwoyke 6mo ago

   The grep approach catches zero-width joiners and BOM characters but misses what GlassWorm uses - variation selectors (U+FE00-FE0F and U+E0100-E01EF). Those don't show up in most regex patterns people reach for, and they're valid U
2. 2.▲
   Glassworm-hunter – detect GlassWorm supply chain payloads by technique(afine.com)

   1 points by pwoyke 6mo ago|0 comments