I've been witnessing a trend whereas non-nerds, or schizo nerds, seem to be under the impression virtually everything is AI generated.
My comment section has been littered with non-core audience people asserting:
- News articles are AI generated (fake in totality, never happened)
- My profile is AI generated (???)
- Images shared are AI generated (memes, video edits, etc). They're edits, but not AI
AI has destroyed the normal person's mind and they appear incapable of differentiating AI from reality.
It is absolutely fascinating. It's like we're watching a science experiment in real time.
My comment section has been littered with non-core audience people asserting:
- News articles are AI generated (fake in totality, never happened)
- My profile is AI generated (???)
- Images shared are AI generated (memes, video edits, etc). They're edits, but not AI
AI has destroyed the normal person's mind and they appear incapable of differentiating AI from reality.
It is absolutely fascinating. It's like we're watching a science experiment in real time.
😢110❤18🥰12🤣10💯6👍5🤔3🤯1
vx-underground
I've been witnessing a trend whereas non-nerds, or schizo nerds, seem to be under the impression virtually everything is AI generated. My comment section has been littered with non-core audience people asserting: - News articles are AI generated (fake in…
Oh, and since the Epstein files apparently EVERYTHING is a government psyop. Literally fucking everything. It's like someone dropped a schizo bomb on the internet and now everyone has lost their mind
It's cool and badass
It's cool and badass
🥰91😁26❤11🔥5🤔4😱2💯2
Xitter removed the light blue color scheme. The only options are 'dark' theme and 'light' theme.
Both look like shit.
This entire site is going to hell in a hand basket. This has ruined my day, possibly my entire life, I don't know yet.
Both look like shit.
This entire site is going to hell in a hand basket. This has ruined my day, possibly my entire life, I don't know yet.
🤣81😢11😁7🥰5❤2🤓1
vx-underground
Xitter removed the light blue color scheme. The only options are 'dark' theme and 'light' theme. Both look like shit. This entire site is going to hell in a hand basket. This has ruined my day, possibly my entire life, I don't know yet.
Someone get that fucking Nickle guy on the horn, whatever the fuck his name is, and tell him to revert these changes.
Oh, you can change the fucking themes but you can't stop the Chinese state-sponsored propaganda or the 200 OnlyFan's spam messages I get a day?
Oh, you can change the fucking themes but you can't stop the Chinese state-sponsored propaganda or the 200 OnlyFan's spam messages I get a day?
🤣57🫡8❤7💯4🥰1
Mildly interesting
In NTDLL there is RtlCheckSandboxedToken.
RtlCheckSandboxedToken is a wrapper for NtQueryInformationToken with the TokenIsAppContainer flag from the TOKEN_INFORMATION_CLASS enum.
returning non-zero means the application is sandboxed, in an app container, or running as a protected process.
In NTDLL there is RtlCheckSandboxedToken.
RtlCheckSandboxedToken is a wrapper for NtQueryInformationToken with the TokenIsAppContainer flag from the TOKEN_INFORMATION_CLASS enum.
returning non-zero means the application is sandboxed, in an app container, or running as a protected process.
🥰43❤10🤣6🤯4🔥3
> be sinobi ransomware group
> have ransomware "blog"
> use to extort companies
> list halcyon.ai
> "WE RANSOMED THE ANTI RANSOMWARE COMPANY"
> look inside
> not halcyon.ai
> ransomed halcyontek
> mfw they dont know who theyre extorting
> have ransomware "blog"
> use to extort companies
> list halcyon.ai
> "WE RANSOMED THE ANTI RANSOMWARE COMPANY"
> look inside
> not halcyon.ai
> ransomed halcyontek
> mfw they dont know who theyre extorting
🤣116❤9🥰5😢2🔥1😁1🤔1
vx-underground
> be sinobi ransomware group > have ransomware "blog" > use to extort companies > list halcyon.ai > "WE RANSOMED THE ANTI RANSOMWARE COMPANY" > look inside > not halcyon.ai > ransomed halcyontek > mfw they dont know who theyre extorting
dawg, if youre going to be an internationally wanted cybercrime organization involved in extortion, money laundering, aggravated identify theft, CFAA violations, etc AT LEAST extort the right people
how you gonna extort someone you have no data for???
how you gonna extort someone you have no data for???
🤣78❤6🥰4
I planned on making educational YouTube videos, but with full time employment, a 10 month old baby (about to be 11 months in a few days!), the rest of my family, a vx-underground, work developing malware and poking malware with a stick, I can't summon the energy to make dumb videos on malware.
I'm soft blooded.
When I'm not working, my brain is so deep fried and exhausted I unironically watch Elder Scrolls lore videos and dumb videos on internet drama.
I don't have any friends in real life, they're all far away or married with children too. My entire existence is working or caring for a baby.
It's not bad, I love it. I'm very happy.
But... God damn am I tired. I'm so tired and I don't even really remember the last time I was able to relax. It's unironically been years since I wasn't working in some capacity. At this point, I don't even know if I know how to relax. When I'm not doing malware stuff, I feel compelled to do malware stuff.
It's all ogre.
I don't expect any of you to give a shit. But I wanted to scream into the void of internet.
Thanks.
I'm soft blooded.
When I'm not working, my brain is so deep fried and exhausted I unironically watch Elder Scrolls lore videos and dumb videos on internet drama.
I don't have any friends in real life, they're all far away or married with children too. My entire existence is working or caring for a baby.
It's not bad, I love it. I'm very happy.
But... God damn am I tired. I'm so tired and I don't even really remember the last time I was able to relax. It's unironically been years since I wasn't working in some capacity. At this point, I don't even know if I know how to relax. When I'm not doing malware stuff, I feel compelled to do malware stuff.
It's all ogre.
I don't expect any of you to give a shit. But I wanted to scream into the void of internet.
Thanks.
🫡171❤68🤝23😢10❤🔥3🤓3🥰2🤔1
Yeah, so pretty much that whole Windows 11 Notepad RCE thing was ridiculously stupid. Like, it was so dumb it kind of hurts.
Windows 11 Notepad, with the fancy Copilot AI slop, now possesses the ability to handle mark up, or markdown, ... It's mark something, the stuff used in ReadMes. Whatever.
Anyway, a security researcher realized that if you used markup in Notepad and instead of a hyperlink to a website with https:// you put file:// (the protocol on Windows for files, like in file explorer), it will arbitrarily execute it. It won't prompt you.
Furthermore, he realized you could specify a remote host to execute it from using a different Microsoft specific protocol used for app installation. In other words, if you user clicked the hyperlink in Notepad it would download and run a program from any website ... without alerting the user.
Normally, any sort of hyperlink that leads to a different domain, or tries to execute a file, is supposed to prompt you with an alert message, ... or something. However, Microsoft software engineers seemingly forgot to implement this notification Window.
With this attack vector which has been present for AT LEAST 9 months, a malicious actor could send a .txt file and if the user clicked the link inside the .txt file it would automatically execute and run anything specified in the hyperlink.
Even more silly, forensically under the hood, the logs on Windows, or to an anti malware service, it would look like Notepad was downloading something and then running a program. This is a very unique scenario which (to the best of my knowledge) no security product has encountered before. This could hypothetically result in files being downloaded and executed and being completely ignored by anti malware services because Notepad is a known and trusted program. Why would an anti malware service question Notepad?
Basically, the point I'm trying to get to here is that I don't understand why Microsoft has introduced so many new features into Notepad. With new features means a new attack landscape (more stuff to abuse).
Whatever man
Windows 11 Notepad, with the fancy Copilot AI slop, now possesses the ability to handle mark up, or markdown, ... It's mark something, the stuff used in ReadMes. Whatever.
Anyway, a security researcher realized that if you used markup in Notepad and instead of a hyperlink to a website with https:// you put file:// (the protocol on Windows for files, like in file explorer), it will arbitrarily execute it. It won't prompt you.
Furthermore, he realized you could specify a remote host to execute it from using a different Microsoft specific protocol used for app installation. In other words, if you user clicked the hyperlink in Notepad it would download and run a program from any website ... without alerting the user.
Normally, any sort of hyperlink that leads to a different domain, or tries to execute a file, is supposed to prompt you with an alert message, ... or something. However, Microsoft software engineers seemingly forgot to implement this notification Window.
With this attack vector which has been present for AT LEAST 9 months, a malicious actor could send a .txt file and if the user clicked the link inside the .txt file it would automatically execute and run anything specified in the hyperlink.
Even more silly, forensically under the hood, the logs on Windows, or to an anti malware service, it would look like Notepad was downloading something and then running a program. This is a very unique scenario which (to the best of my knowledge) no security product has encountered before. This could hypothetically result in files being downloaded and executed and being completely ignored by anti malware services because Notepad is a known and trusted program. Why would an anti malware service question Notepad?
Basically, the point I'm trying to get to here is that I don't understand why Microsoft has introduced so many new features into Notepad. With new features means a new attack landscape (more stuff to abuse).
Whatever man
😘74💯14😢12❤9🥰6🤣4🎉2🤔1
vx-underground
Yeah, so pretty much that whole Windows 11 Notepad RCE thing was ridiculously stupid. Like, it was so dumb it kind of hurts. Windows 11 Notepad, with the fancy Copilot AI slop, now possesses the ability to handle mark up, or markdown, ... It's mark something…
It's 2026 and now defenders need to unironically worry about malicious text files.
Nothing is sacred.
Nothing is sacred.
🥰66😢19🫡9❤5😁4
Big big drama today in Cybersecurity world. A cybersecurity company is faced with telling the truth, or using "softer language" to avoid losing money or (worse case scenario) employees disappearing
See subsequent post for the full news article. Here is the drama summary
> be palo alto
> have threat intel division named unit42
> unit42 finds hacking campaign
> calls it "shadow campaign"
> attribute hacking campaign to chinese government
> palo alto executives see report
> suggest remove attribution to china
> new suggestion appears
> "state-aligned group that operates out of Asia"
> original draft given to reuters
> lolwtf
> backup, rewind
> January 2026 china say palo alto bad
> palo alto worried about china government
> palo alto have employees in china
> palo alto have five offices in china
> vp lady from palo alto emails journalists
> "not worried about china lol"
> ask why change then
> VP: "attribution is irrelevent"
> ask if scared of china
> VP: "speculative and false"
> ask why change (again)
> VP: "Choice of language in Palo Alto's report reflected how to best inform and protect governments about this widespread campaign"
> ???
See subsequent post for the full news article. Here is the drama summary
> be palo alto
> have threat intel division named unit42
> unit42 finds hacking campaign
> calls it "shadow campaign"
> attribute hacking campaign to chinese government
> palo alto executives see report
> suggest remove attribution to china
> new suggestion appears
> "state-aligned group that operates out of Asia"
> original draft given to reuters
> lolwtf
> backup, rewind
> January 2026 china say palo alto bad
> palo alto worried about china government
> palo alto have employees in china
> palo alto have five offices in china
> vp lady from palo alto emails journalists
> "not worried about china lol"
> ask why change then
> VP: "attribution is irrelevent"
> ask if scared of china
> VP: "speculative and false"
> ask why change (again)
> VP: "Choice of language in Palo Alto's report reflected how to best inform and protect governments about this widespread campaign"
> ???
🤣73🥰12🔥8❤2
The United States Military made a post today on social media about spies.
/me taps sign
/me taps sign
🤣103🥰10❤6🫡3😁1
vx-underground
The United States Military made a post today on social media about spies. /me taps sign
Half you stinky fucking nerds would fold immediately. You'd know it's a spy too, you'd be like, "fuck it, I don't give a shit".
🥰67😁28❤9🫡6👍5🔥5❤🔥1💯1
Spoke with normal people today.
Within the first couple of minutes I realized I'm a degenerate no life who is completely detached from reality
They discussed foreign concepts such as, "plans this weekend" and "sports".
They asked me about "plans this weekend" and "sports". I froze. I could barely make sense of these concepts.
Using context clues I was able to string together a few sentences which seemed to throw them off my scent. I said something akin to, "Not a fan of Tiger Woods, but the Dow Jones is over 50,000".
Mission accomplished.
Within the first couple of minutes I realized I'm a degenerate no life who is completely detached from reality
They discussed foreign concepts such as, "plans this weekend" and "sports".
They asked me about "plans this weekend" and "sports". I froze. I could barely make sense of these concepts.
Using context clues I was able to string together a few sentences which seemed to throw them off my scent. I said something akin to, "Not a fan of Tiger Woods, but the Dow Jones is over 50,000".
Mission accomplished.
🤣73🥰20❤10💯8😎4😇2