On Thursday, Hex-Rays pulled the update. They released a “rollback patch” that was, ironically, larger than the original update. Inside its disassembly, a new comment was found, presumably left by a furious competitor or a heroic insider:
And somewhere, in a deleted commit log, the ghost of “Steve” chuckled—a silent, hexadecimal laugh echoing through the very tool that was meant to reveal all secrets.
October 23, 2026
For the 50,000 people who clicked “Update Now” on IDA Pro—the legendary, gold-standard disassembler used by malware analysts, government agencies, and hardcore game modders—nothing seemed amiss. The progress bar filled. The hex editor refreshed. The world kept spinning.
Within an hour, “Steve from IDA” was trending globally. IDA Pro 7.2 Leaked Update Download Pc
Then, at 11:47 AM GMT, a user on X (formerly Twitter) with the handle @RevEng_TrashPanda posted a single screenshot. It wasn’t a complex exploit or a zero-day vulnerability. It was a of a freshly disassembled Windows DLL.
The damage, however, was done. The viral content had created a new verb: “To get IDA’d” — meaning to have your trust betrayed by your most fundamental tool. On Thursday, Hex-Rays pulled the update
If you were a security researcher in 2026, that meant every piece of malware you analyzed, every game you tried to crack, and every proprietary driver you worked on had just been quietly exfiltrated to a server in Luxembourg.