Mirror of forum.nim-lang.org

8274 :: Nim earns mention in the news (unfortunately?)

• xhevahir (orginal) [2021-07-27T16:38:06+02:00] view original

  It's named as one of a few "exotic" languages that are reportedly being used in malware attacks: https://www.zdnet.com/article/malware-developers-turn-to-exotic-programming-languages-to-thwart-researchers/

---

• juancarlospaco (orginal) [2021-07-27T18:08:00+02:00] view original

  It is a tool, can be used for good or for bad, malware can be used for good too, like in Red-Team or Scam-Baiting. :)

---

• xigoi (orginal) [2021-07-29T10:35:00+02:00] view original

  It's said that there's no such thing as bad publicity. If this makes someone curious about Nim…

---

• lscrd (orginal) [2021-07-29T11:24:16+02:00] view original

  Sure. In any domain, the worst thing is to be totally ignored.

---

• cdunn2001 (orginal) [2021-08-04T09:19:52+02:00] view original

  The idea that they code in specific languages to avoid detection is absurd. The malware is in the binary.

  These are really good coders, and they are adopting agile languages because they are agile. Nim is particularly agile, and still low-level. I'd say this is a sign that Nim is about to explode in popularity. But we'll see ...

---

• federico3 (orginal) [2021-08-05T15:47:41+02:00] view original

  Indeed. Viruses, trojans, malware have been obfuscated using encryption, polymorfism, self-mutation etc for decades. Switching language to avoid detection sounds dubious. Furthermore, Nim compiles to C and analyzing malware written in C is pretty routine.

---

• tmsa04 (orginal) [2021-08-12T01:03:05+02:00] view original

  The article talks about droppers and loaders. The malware could be some binary catted to a txt file then encrypted and hidden in something else which gets unpacked by the dropper, or it might be downloaded at a later stage from elsewhere. The nim code could be delivered uncompiled and the user is tricked into building it after downloading it, then that installs the real malware. That sort of thing is about misdirection and doing things in unusual ways that haven't been done before, so a lesser known language is ideal to make an innocent looking "installer" app.

---