Top all-time · #8515
ANY.RUN
Company blog · any.run/cybersecurity-blogsecurity
ANY.RUN is the company blog at any.run, writing about security. Since 2018, 9 different Hacker News readers have linked it 9 times. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN commenters link ANY.RUN's malware analysis reports and malware-trend pages as evidence, and point to its sandbox for running untrusted code. The linked pages cover malware sandbox reports and threat research.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Cloud-based malware analysis service. Take your information security to the next level. Analyze suspicious and malicious activities using our innovative tools.
What Hacker News says?
Cloudflare has been infamous among sysadmins and threat hunters for over a decade [1,2] now for having an almost-nonexistent moderation program. Their services have been routinely abused by malicious actors for years [3,4,5,6,7] They've arguably been the single largest commercial provider for criminals globally over that time period, including non-tech criminals like drug traffickers and actual terrorists [8,9], to…
Comment linking /cybersecurity-blog/clouflare-phishing-campaign/
on “Threat actor abuses Cloudflare tunnels to deliver remote access trojans”Submitted Smile, You're on Camera: Live from Inside Lazarus Group's IT Workers Scheme as a story · 5 points
HN discussionI was curious about the URL that they indicated was non-malicious and so looked it up on google. I found this any.run report: Report: https://any.run/report/e8c581d52ca3527b61c7ddd9aba5dfeaf9440... Original URL: h t t p s : / / gold.platinumus.top/track/awswrite?q=dmn
Comment linking /report/e8c581d52ca3527b61c7ddd9aba5dfeaf944069b625577889b83e425d54f887a/a5f1e345-5559-4955-960d-752bf877e028
on “Twilio: Someone broke into our AWS S3 silo, added 'non-malicious' code to JS SDK”Submitted New Lazarus Apt Campaign: "Mach-O Man" macOS Malware Kit Hits Businesses as a story · 1 points
HN discussionEdit4: Sorry, False Alarm: https://any.run/malware-trends/amadey/ IP addresses 185.199.108.133 Hostname: cdn-185-199-111-133.github.com. https://dnschecker.org/reverse-dns.php?query=185.199.111.133 --- Virus Total: Activity related to AMADEY - according to source Cluster25 - 6 months ago This DOMAIN is used by AMADEY. Amadey is a botnet agent that appeared around October 2018 sold on Russian-speaking hacking forums.…
Comment linking /malware-trends/amadey/
on “Show HN: Free open source Adobe Lightroom alternative, completely local with AI”Submitted Any Run – Free interactive malware hunting service as a story · 1 points
HN discussionInteresting bit starts around 0:32 (ain't nobody got time for this, right?) This shows how malware pops up a dialog to "verify you are human"; something we've all seen in various different permutations. Sometimes we need to click all stoplights, sometimes we need to do a simple math problem or decipher hard to read text. This time you're being asked to enter a key combination (Win+R, then CTRL+V then Enter) which wi…
Comment linking /report/e9af23d9fde13156ade19368fd8c2766fe8f18a3d30980ebc8ba09f0c25fad88/00d07fc6-0380-4d86-965f-711ea4871a63
on “Malware faking "Cloudflare Am I Human" get user to install virus @0:32 [video]”Why not use https://any.run ?
Comment linking /
on “Ask HN: Running Untrusted Code as a Service?”https://any.run/cybersecurity-blog/chatgpt-powered-analysis-... Sort of did this
Comment linking /cybersecurity-blog/chatgpt-powered-analysis-method/
on “Open Source Ad Blocker for Mac, Windows, and Linux”