About Me, Myself, and I

Wed, 25 Feb 2026 00:00:00 +0000

I’d love to spare you the agony of a biography, but you might want to know I started with computers on a Macintosh SE running System 7, programming musical keyboards, then drifted into pirating, debugging, reversing, and developing software 🏴‍☠️

As a security researcher, I notably discovered RSPlug aka the DNSChanger variant for Mac, uncovered the Flashback botnet (named after the popular track by Laurent Garnier), exposed the Hacking Team implant, dissected adware like IronCore or GuiInject, miners like Pwnet or CpuMeaner, and even suggested the Shlayer name. Then I vanished into the reality distortion field. I shipped meaningful work, outlasted some turbulence, and left with unfinished business.

XProtect behavioral flop

Wed, 04 Feb 2026 00:00:00 +0000

On reading the latest Security Advisories for macOS, a few friends noticed I recently went through a career change:

Sandbox
We would like to acknowledge Arnaud Abbati for their assistance.

And, for once I can share what I do, I am certainly not going to miss the opportunity!

Threat or Thread

As far as I remember, I always kept an eye wide open on live threats to monitor their evolutions. Once I’d figure out the delivery method, I’d automate the downloading of new variants and receive notifications about notable changes.

Melomac

About Me, Myself, and I

XProtect behavioral flop

Threat or Thread