Worm Charming - Harvesting Malware Lures for Fun and Profit

The course demonstrates how to use YARA rules and VirusTotal intelligence to surface malware samples, then explores clustering and practical automation workflows. Labs include document dissection, an API-driven example, Base64 record generation, and reputation aggregation.

Syllabus

Introduction
Who am I
What is Worm Charming
Lures
Where do we dig
Attacker infrastructure
VirusTotal Intelligence
Good Vibrations
Chaff
Bite Nibble
Primitives
RealWorld Samples
Stevi 2018 8174
ZeroDay
Clustering
Why is this useful
Labs
Document dissector
API driven example
Base64 record generator
Reputation aggregation
Thank you
Questions