Detecting Obfuscated Lua Malware Automatically

Obfuscated Lua is often used to hide malicious intent in FiveM scripts. In this post, I explain common obfuscation patterns, encrypted loaders, and how I built a Python-based static scanner that detects suspicious logic and reports exact lines to Discord.