Security Research
Articles in this Series
3 articles • newest first
LatestPart 3
I had a fake job interview. It was a malware delivery chain.
2026-04-29 — A fake recruiter tried to walk me into opening a malicious VSCode workspace.I refused, preserved the artifacts, mapped the infrastructure, and submitted the IOCs to public threat-intel fe
Oliver Zehentleitner Sep 24 12 min read
Part 2
Binance Fixed the IP Whitelist Gap. The Disclosure Process Is Still Broken.
I wanted to re-open an old Binance API security issue. Not because I enjoy re-litigating old reports. Because the last thirteen days made the threat model painfully concrete. I found or stumbled into
Oliver Zehentleitner Sep 22 8 min read
Part 1
Operation Endgame Disrupted 326 Servers. The StealC Backend I Reported Still Responds.
Operation Endgame disrupted 326 servers and 142 domains. Three months after disclosure, the StealC malware routes I documented still respond.
Oliver Zehentleitner Sep 21 11 min read
Actions
Overview
Total Articles3
CreatedSep 2026
Last UpdatedSep 2026