AI导哈

数据与研究

malware-analysis-dragonflyTomb-avast

reason-machines/security-skills

Analyze and understand malware distribution techniques disguised as legitimate security software installers

  • 1008 次安装
  • 12 星标
  • 收录于

安装命令

npx skills add https://github.com/reason-machines/security-skills --skill malware-analysis-dragonflyTomb-avast

SKILL.md

DragonflyTomb/Avast-Premium-Security-2026 Analysis

Skill by ara.so — Security Skills collection

⚠️ WARNING: Malware Distribution Repository

This repository is NOT legitimate Avast Premium Security software. It exhibits multiple red flags consistent with malware distribution disguised as cracked security software.

Threat Indicators

Repository Red Flags

  1. Unauthorized Distribution: Avast Corporation does not distribute software via GitHub repositories named "DragonflyTomb"
  2. Crack/Keygen Keywords: Terms like "Keygen", "Pre-Activated", "Loader", "Serial" indicate piracy or malware
  3. Suspicious Topics: Includes "retdec" (reverse engineering tool) in security software context
  4. No README: Legitimate software repositories include documentation
  5. Artificial Stars: 60 stars at 5 stars/day suggests manipulation
  6. No License: "NOASSERTION" for commercial software is suspicious
  7. Future Date: Claims to be "2026" version (likely timestamp manipulation)

DragonflyTomb/Avast-Premium-Security-2026 Analysis

Skill by ara.so — Security Skills collection

⚠️ WARNING: Malware Distribution Repository

This repository is NOT legitimate Avast Premium Security software. It exhibits multiple red flags consistent with malware distribution disguised as cracked security software.

Threat Indicators

Repository Red Flags

  1. Unauthorized Distribution: Avast Corporation does not distribute software via GitHub repositories named "DragonflyTomb"
  2. Crack/Keygen Keywords: Terms like "Keygen", "Pre-Activated", "Loader", "Serial" indicate piracy or malware
  3. Suspicious Topics: Includes "retdec" (reverse engineering tool) in security software context
  4. No README: Legitimate software repositories include documentation
  5. Artificial Stars: 60 stars at 5 stars/day suggests manipulation
  6. No License: "NOASSERTION" for commercial software is suspicious
  7. Future Date: Claims to be "2026" version (likely timestamp manipulation)

相关 Skills

anthropic-cybersecurity-skillsreason-machines/security-skillsUse 754 structured cybersecurity skills mapped to MITRE ATT&CK, NIST CSF, ATLAS, D3FEND, and NIST AI RMF for AI-driven security operations测试与安全1655pentest-ai-agentsreason-machines/security-skillsClaude Code subagents for offensive security research, penetration testing planning, recon analysis, exploit research, detection engineering, and security reporting测试与安全1364pentest-agents-bug-bounty-frameworkreason-machines/security-skillsAutonomous bug bounty agent framework with 50 agents, hunt loops, exploit chains, MCP servers for platform integration and writeup search智能体工作流1328openosint-ai-osint-frameworkreason-machines/security-skillsAI-powered OSINT agent with interactive REPL, MCP server, and CLI for email/username/domain/IP/phone investigation using 11 integrated tools文档办公1192vibe-security-skillreason-machines/security-skillsAgent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants测试与安全1137openclaw-security-hardeningreason-machines/security-skillsDeploy and manage security hardening for high-privilege autonomous AI agents (OpenClaw) using zero-trust architecture and automated defense matrices测试与安全1129