Report: This injects an obfuscated script
Me [reading the Makefile changes]: Ah yeah I can see how that is pretty obfuscated and difficult to understand
Report: …I haven’t even gotten to the obfuscated script yet
Me: Don’t bother this is too hard for me to read already

I need to apologize for an earlier tweet where I said people weren’t looking at this. After looking at this code I have to say “I am *not* a security researcher, nor a reverse engineer” is the understatement of the year. The malware is quite sophisticated and difficult to analyze

It would make for a decent CTF challenge–I’m surprised someone without reversing experience was able to get as far as they did. There are people actual security people in my timeline who did put some effort but the reason I didn’t hear about it is that they didn’t get very far