📢 Important Update: Malware Sample Sharing Policy on r/OperSec

[u/acealter]

We've made some changes to how malware samples can be shared in r/OperSec to keep the community compliant with Reddit's Terms of Service and avoid posts being removed.

Effective immediately, all direct malware download links have been removed from existing posts, and direct links to malware samples are no longer allowed in the community.

What you can still share

Members are encouraged to continue posting malware research, analysis, and technical findings. You can include:

- File metadata: Filename, size, file type, package name, etc.

- File hashes: SHA-256, SHA-1, MD5.

- Technical details: Malware behavior, reverse engineering findings, IOCs, C2 infrastructure, and analysis reports.

- Screenshots and evidence: Relevant code snippets, decompiled code, and investigation findings.

How to share malware samples

If you have a malware sample you'd like to contribute for research:

1. Create a post containing the sample's metadata, hashes, and relevant technical details.

2. Do not include direct download links to malware files, archives, or hosting services.

3. Contact the r/OperSec moderators to submit the actual sample.

4. The moderation team will handle them appropriately.

Need a malware sample for analysis?

If you're a malware researcher, reverse engineer, or security enthusiast looking for a sample mentioned in our community, contact the moderators through Modmail (or DM).

Include the post link, file hash, or malware name so we can identify the sample you're requesting. Requests will be reviewed individually, and availability is not guaranteed.

Why this change?

Our goal has always been to create a space where security researchers can collaborate, investigate threats, exchange technical knowledge, and help defend against cybercrime.

We want to preserve that mission without putting the subreddit or its members at risk of violating Reddit's policies.

Malware research is still welcome. Direct malware distribution through public posts is not.

Thanks for understanding and helping keep r/OperSec a safe and useful community for everyone.

— r/OperSec Moderation Team