VirusTotal

Headlines · 1

1. Oct 20
   REA backlash: client hardening, anti-AI reversing tools and trojan fake repos

   A 字母AI article republished by 钛媒体 describes the fallout from REA, an agent that does not decompile itself but orchestrates tools such as Ghidra, IDA and Hopper. French tech blogger Korben tested it with Opus 5.5: the agent wrote a working Python keygen for a crackme binary in about two minutes at roughly $0.5 in API cost, and the keygen passed verification with 479 random usernames. Elias Bachaalany, co-author of Practical Reverse Engineering, called it hype, noting GhidraMCP and IDA Pro MCP already enabled AI-assisted reversing in 2025. The article also reports Thales releasing Sentinel Envelope Plus, which in Thales' own controlled test left an agent finding none of 10 vulnerabilities it found in the unprotected app, with 970x token consumption; and a fake GitHub org, rea-tools, shipping an 82.6 MB trojanized archive that had been downloaded 172 times when reported, after which maintainers merged a README warning on Oct 13 listing only three official channels.

   钛媒体 · 🔥 0

Experience and discussion from the community

Share my VirusTotal experienceAsk about VirusTotal