CMNatic's Ramblings

The WeedHack Epidemic: YouTube Hijacking to RAT Pipeline, A MaaS That's Cheaper Than Your Netflix (Pt1)

Mon, 06 Jul 2026 15:11:23 +0100

Introduction

Putting aside the edgy name, WeedHack has been a prevalent multi-staged .jar Malware-as-Service (MaaS) campaign in the last few months, and it has no signs of slowing - quite the opposite. This campaign is especially interesting due to the combination of modern techniques that we are seeing actors implement. From SEO Poisoning to YouTube channel hijacking, to the use of Discord as C2 as well as the use of EtherHiding - using the Ethereum network to store configuration and C2 details through smart contracts.

Securing Your Docker Container

Wed, 28 Jan 2026 17:15:09 +0000

Proxmox & Hetzner Dedicated Server: Dual IP (Bridged) with OPNsense

Fri, 02 Jan 2026 11:30:57 +0000

While I’m a massive fan and proponent of Hetzner and particularly their Dedicated Servers, one can come across some frustrating oddities here and there. In this case, Hetzner’s MAC Address binding.

This blog post is a writeup and a bit of a guide as to how I eventually managed to get a Proxmox & Hetzner setup the way I wanted. Before we begin, let’s go over some background.

Please note, this post will not go over how to install Proxmox nor OPNsense. It’s very well documented and easy to do.

Migration In Progress

Fri, 02 Jan 2026 11:08:05 +0000

Greetings!

This blog may appear empty for some time. In fact, the blog is being entirely rebuilt. I will be migrating my old blog posts onto this, and, unlike last time, hopefully keeping this up to date and regular!

Cheers!