https://pop-ecx.github.io/tags/redpill/Recent content in Redpill on pop-ecxHugo -- gohugo.ioen-usSun, 02 Aug 2026 21:21:57 +0300https://pop-ecx.github.io/my-fav-redpill/Sun, 02 Aug 2026 21:21:57 +0300https://pop-ecx.github.io/my-fav-redpill/No! Not the silly manospohere stuff. Redpills; techniques in which software (specifically malware) can detect whether they are running in some sort of virtualized environment, sandbox or debugger. It’s mostly used by malware authors to make life for us analysts a little bit harder. The name is an ode to the movie The Matrix, and a pretty great one at that. There are a few techniques that can be used here including checking for the presence of certain processes, files, or registry keys that are commonly associated with virtual machines or sandboxes.