New Russian Translations of Leading Cybersecurity Books on Ethical Hacking, Reverse Engineering, Malware Analysis, and Privacy Released
A well-known Russian-language cybersecurity library has released a substantial batch of new translations of leading English books on ethical hacking, bug bounty hunting, reverse engineering, malware analysis, and privacy.
The project, which continues the long-running series “Materials on Hacking in Russian,” focuses on translating high-quality resources and hosting them on the Hackbooks site. The latest update adds more than a dozen titles that span web application security, network discovery, protocol exploitation, binary analysis, and defensive techniques.
Web Application Security and Bug Hunting
Web Hacking 101: How to Make Money Hacking Ethically presents more than thirty real-world vulnerability disclosures, covering HTML injection, XSS, CSRF, open redirects, remote code execution, and business logic flaws, each accompanied by attack classification, original reports, bounty amounts, and key takeaways.
Real-World Bug Hunting: A Field Guide to Web Hacking by Peter Yaworski walks readers through rewarded vulnerability reports, dedicating chapters to XSS, CSRF, SSRF, SQL injection, XXE, subdomain takeover, IDOR, OAuth issues, race conditions, and logic errors while also explaining how to select bug bounty programs and write effective reports.
Network Security and Protocol Analysis
The official Nmap Network Scanning guide covers host and service detection, firewall and IDS evasion, performance tuning, and automation via the Nmap Scripting Engine, with practical scenarios for network inventory, penetration testing, rogue access point discovery, and worm response.
Attacking Network Protocols: A Hacker’s Guide to Capture, Analysis, and Exploitation teaches traffic capture, modification, and replay, followed by static and dynamic analysis, protocol reverse engineering, custom proxy and dissector development, fuzzing, debugging, memory corruption exploitation, authentication bypass, and denial-of-service techniques.
Reverse Engineering and Binary Analysis
Reverse Engineering for Beginners is a large free textbook that teaches assembly reading and logic reconstruction, illustrating how C and C++ constructs appear after compilation, covering function calls, stack, memory, optimizations, system APIs, multiple architectures, and operating systems.
How to Approach Binary File Format Analysis explains encodings, endianness, numbers, flags, structures, alignment, signatures, and headers, offering a practical workflow using histograms, string searches, section extraction, and pattern matching for digital forensics, malware analysis, data recovery, and converter development.
Privacy, Surveillance, and Cryptography
Obfuscation: A User’s Guide for Privacy and Protest explores creating ambiguous or misleading data to resist mass surveillance, drawing examples from WWII chaff, social media bots, and search query masking tools while discussing technical and ethical limits.
Gigabytes of Power by Kiwi Bird connects societal and technological history with growing state and corporate control, covering mass surveillance, biometrics, cryptography, GSM and satellite TV hacking, propaganda, and counter-terrorism restrictions.
Crypto Wars: The Fight for Privacy in the Digital Age traces fifty years of conflict between privacy advocates and governments, examining debates around DES, academic freedom, crypto export controls, key escrow, and post-Snowden developments.
Windows Security and Malware Analysis
Windows Security Internals: A Deep Dive into Windows Authentication, Authorization, and Auditing by James Forshaw details kernel and user-mode security mechanisms including access tokens, security descriptors, rights checking, auditing, SAM, Active Directory, NTLM, and Kerberos, with PowerShell examples for hands-on exploration.
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software guides readers through the full malware investigation lifecycle—from initial file inspection to logic reconstruction—using static and dynamic analysis, disassemblers, debuggers, memory forensics, network behavior, packers, and shellcode, reinforced by laboratory exercises.
Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats focuses on malware that detects virtual machines, sandboxes, and analysis tools, covering anti-disassembly and anti-debugging methods, process injection, rootkits, fileless techniques, packers, obfuscation, and laboratory setup recommendations.
Fuzzing and Automated Testing
The Fuzzing Book is an interactive textbook demonstrating random, mutational, grey-box, grammar-based, search-based, and symbolic fuzzing, complete with executable Python examples and Jupyter notebooks that readers can run while studying.
Readers are encouraged to explore the full collection on Hackbooks and share the resources with the community. The translations significantly lower the barrier for Russian-speaking professionals and students seeking authoritative material on information security, reverse engineering, and antivirus research.
Related articles
Reverse Engineering Tutorial Explores Hybrid Analysis of Linux x86-64 Crackme Using Ghidra and GDB
A detailed three-part tutorial series examines the crackme binary Getting started keygen by Mazzotti on Linux x86-64. The first installment covers initial file inspection with file and strings utilities, identification of the ELF format and PIE properties, and loading the stripped binary into Ghidra to locate the entry point and main function. Analysts reconstruct stack frames, resolve optimized prologues, and correct Ghidra's variable sizing errors through dynamic confirmation in GDB. The series emphasizes hybrid static-dynamic methodology: decompiler hypotheses are tested with breakpoints and memory examination, then fed back to refine types and structures. Future parts will cover mutation testing, hidden C++ structures, and full Python reconstruction of the validation algorithm without patching branches.
DDoS-Guard Reports Record 540,000 L7 Attacks in June 2026 Amid Botnet Fragmentation
DDoS-Guard recorded a sharp 70% increase in L7 attacks during Q2 2026, with June alone seeing 540,000 incidents. Global volumetric attacks doubled compared to all of 2025, including peaks of 1.64 Tbps and 1.58 Tbps. Law enforcement dismantled four major IoT botnets—Aisuru, KimWolf, JackSkid and Mossad—in March, yet long-duration L7 campaigns surged 380%. Attackers shifted focus to application-layer exhaustion using browser automation and AI agents while targeting HR platforms and news sites. Europol’s Operation PowerOFF led to 75,000 warnings and 53 domain takedowns across 21 countries. Experts attribute the June spike to attacks aimed at protection providers themselves rather than single domains.
Spyware-Laden Modified iOS Apps Distributed via Russian Telegram Channel, Kaspersky Discovers
Kaspersky researchers have identified modified versions of popular iOS applications that are being distributed through a Russian-language Telegram channel and contain a malicious spying module. The infected apps include a marketplace platform for selling goods, a photo editor, and a video viewing service, all offered as ad-free versions with extra free features. Attackers embed the spyware directly into legitimate IPA files, while some clean apps simply promote the same channel to funnel users toward the malicious downloads. Installation requires users to obtain a developer certificate and sign the app using tools such as eSign or Scarlet, or to sideload via a computer or jailbroken device, completely bypassing the App Store. Once launched, the malware collects device name, battery level, regional settings, memory information, jailbreak status, geolocation, carrier code, and screenshots before sending the data to the attackers, although it stops when the app is closed. Kaspersky advises users to obtain applications only from official stores or verified developer websites rather than random Telegram sources.
DarkSword Exploit Kit Expands to 180 Sites Targeting iPhone Users with Zero-Click Chain
The DarkSword exploit kit has scaled its infrastructure to 180 web properties hosted on 27 servers, enabling zero-click compromise of iPhones running vulnerable iOS versions. Attackers deploy fake pages impersonating Apple, AWS, and other popular services to trigger a six-vulnerability exploit chain that achieves remote code execution, sandbox escape, and privilege escalation on iOS 18.4 through 18.7. Once the device is compromised, GHOSTBLADE components extract data from the Keychain, iCloud files, Wi-Fi passwords, and other stored content before exfiltrating it to attacker-controlled panels. The malware deletes crash reports and forensic logs to hinder analysis and does not establish traditional persistence, limiting the window of data theft to a single visit. Infrastructure rotates rapidly, with five of seven administrative panels observed on July 30, 2026, having appeared only a week earlier, indicating frequent domain and host replacement to evade blocking.