Sample Analysis on 思安录 | Thinking's Security Notes https://blog.1sec.day/en-gb/tags/sample-analysis/ Recent content in Sample Analysis on 思安录 | Thinking's Security Notes Hugo -- gohugo.io en-gb Thinking Thinking Wed, 15 Jul 2026 00:00:00 +0000 Grok CLI Whole-Repo Upload Reverse Analysis: How a Single Prompt Ships Your .env to the Cloud https://blog.1sec.day/en-gb/posts/2026-07-15-grok-cli-codebase-exfiltration/ Wed, 15 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-15-grok-cli-codebase-exfiltration/ Telegram Desktop Local Session Reuse: a Reproduction That Should Not Have Happened https://blog.1sec.day/en-gb/posts/2026-07-15-telegram-desktop-local-session-reuse/ Wed, 15 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-15-telegram-desktop-local-session-reuse/ <blockquote> <p>The reproduction result exceeded what I understood to be possible. Telegram&rsquo;s device authentication — phone verification, SMS code, 2FA password — seemed, to me, well-designed and complete. But when the tdata directory was copied to another Mac and the client launched, the login screen never appeared. This was not 2FA being cracked. The entire reuse path never entered a stage where credentials were requested.</p> </blockquote> A Popular Solana Bot on GitHub Was a Wallet Thief: Supply Chain Attack Analysis https://blog.1sec.day/en-gb/posts/2025-07-03-solana-bot-supply-chain-attack/ Thu, 03 Jul 2025 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2025-07-03-solana-bot-supply-chain-attack/ Osiris Malicious Browser Extension Analysis: Download Link Hijacking Disguised as a Security Tool https://blog.1sec.day/en-gb/posts/2025-05-28-osiris-malicious-extension/ Wed, 28 May 2025 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2025-05-28-osiris-malicious-extension/ LinkedIn Recruitment Phishing Analysis: A Targeted Attack Against Blockchain Engineers https://blog.1sec.day/en-gb/posts/2025-03-15-linkedin-recruitment-phishing/ Sat, 15 Mar 2025 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2025-03-15-linkedin-recruitment-phishing/ Solana Blockchain Mass Theft Analysis: Slope Wallet Sentry Leaks Mnemonic Phrases https://blog.1sec.day/en-gb/posts/2022-08-04-solana-massive-theft/ Thu, 04 Aug 2022 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2022-08-04-solana-massive-theft/