ESET Research#ESETResearch releases IPyIDA 2.0, a plugin for IDA Pro that integrates IPython for a better console. Learn about all the new features on Hex-Rays’ blog at https://hex-rays.com/blog/plugin-focus-ipyida/ or read the tl;dr down here 👇 @marcetienne 1/5
1️⃣ It is now possible to start a Jupyter Notebook connected to IDA Python right from IDA. One of the most requested features! 🎉 2/5
2️⃣ You can now CTRL-click (or CMD-click if you’re on a Mac) on addresses, variables, or function names to jump right to them in the disassembly view. 3/5
3️⃣ Python byte strings are now displayed as hex dumps when they contain non-ASCII content. 4/5
Check out IPyIDA on ESET’s GitHub for more details and to install or upgrade your existing IPyIDA. https://github.com/eset/ipyida 5/5
#ESETResearch released its latest APT Activity Report, covering the period from September until the end of December 2022 (T3 2022). Take a look ➡ https://www.welivesecurity.com/wp-content/uploads/2023/01/eset_apt_activity_report_t32022.pdf 1/4
Russia-aligned 🇷🇺 APT groups continued to be particularly involved in operations targeting Ukraine 🇺🇦, deploying destructive wipers such as NikoWiper. #Sandworm launched wipers in parallel with Russia’s armed forces launching missile strikes targeting energy infrastructure. 2/4
Along with #Sandworm, other Russian 🇷🇺 APT groups such as Callisto and Gamaredon continued their spearphishing campaigns against the Eastern European nation 🇺🇦. Russian APT groups attacked Ukraine with ransomware too (Prestige, RansomBoggs). 3/4
China-aligned 🇨🇳 groups, specifically Goblin Panda, started duplicating Mustang Panda's interest in European countries. Iran-aligned 🇮🇷 groups continued to operate at a high volume. Full report ➡️ https://www.welivesecurity.com/wp-content/uploads/2023/01/eset_apt_activity_report_t32022.pdf #ESETresearch 4/4