vx-underground – Telegram
vx-underground
45.8K subscribers
3.93K photos
418 videos
83 files
1.43K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
While 21-year-old Jack Teixeira did leak TS/NOFORN documents onto a Minecraft Discord, we at vx-underground believe him and his legal team will be able to invoke the 1999 HARD CHAT ACT.

It is well within his rights to leak government documents to win internet nerd fights.
🤣80👍86🤯4🤪3🫡2🥰1
Tomorrow is the last day to submit content for the vx-underground & SentinelOne malware research challenge.

First place wins a brand new Mac Book =D

Link for entry if you'd like to make a last minute submissions: s1.ai/vx-s1/
22👍3🔥1
We've updated the vx-underground Windows malware paper collection

- No Loitering - Exploiting Lingering Vulnerabilities in Default COM Objects
- Early Bird Injection - APC Abuse
- COM Hijacking for Persistence

Check it out here: https://www.vx-underground.org/windows.html
15👍6
We've had people contact us who have read nearly every single paper in the vx-underground corpus - thousands upon thousands of malware papers.

vx-underground is a malware monastery and we are producing next-generation malware monks.
56🙏4👍2😱2❤‍🔥1
There has been some updates to the Pompompurin court case.

The United States Magistrate Judge John F. Anderson has authorized the usage of mass victim notification via a case-specific web page on the Eastern District of Virginia website.

tl;dr getting his own webpage😎
🥰267😢4👏2🤔2🔥1
This media is not supported in your browser
VIEW IN TELEGRAM
POV: you're talking to someone obsessed with privacy and online anonymity
🤣697💯4🥰2😁1
Lockbit ransomware group has created their first MacOS-based payload. We believe this is the first time a large ransomware threat group has developed a payload for Apple products.

We have samples.

Intel via malwrhunterteam & BrettCallow

Download: https://samples.vx-underground.org/samples/Families/LockBitRansomware/Samples/
🎉239🫡5😢4🔥2🤪2❤‍🔥1👍1
It appears we are late to the game. The MacOS variant has been available since November 11th, 2022.
🫡55🤣21👍7😱3😢31
Based on the tsunami of information we received:

1. The Lockbit MacOS ransomware is real. Lockbit has confirmed this.

2. People speculate it is incomplete. The MacOS payload is riddled with bugs - including a good ol' buffer overflow.

3. It is Sunday. We'll see you nerds later
👍45🫡154🔥3
Unable to bypass UAC? Spam UAC prompt until the user presses 'Yes'.
🤣134🥰17🫡10🤩72😁2
ALPHV ransomware group appears frustrated with Western Digital
🔥66😁16🤪4👏3🤣3🫡3🤔2👍1😱1😢1
Today Microsoft announced they're changing the way they name and label threat groups. The new naming convention now aligns with "the theme of weather"

The new names are absolutely ridiculous and we are having a difficult time taking it seriously

See attached images for examples
🤣88👍7🤔7
TA505, the group believed to be behind the Dridex Banking Trojan, Locky ransomware, and GlobeImposter ransomware, has been renamed internally at Microsoft Threat Intelligence.

TA505 is now known as Spandex Tempest
🤣85🤯6🫡65😍3🤔2
We've updated the vx-underground malware collection.

- Virusshare.00466
- Updates to the Redline family
- Updates to the Magniber family
- Updates to the xLoader family
- New family added: Mmon

Check it out here: https://www.vx-underground.org/malware.html
21👍1
🥰141🫡20🔥18❤‍🔥8🤔8👍4😁2💯21🎉1
No major updates today. We are busy.

Please accept this image of a cat as a token of an apology.
🤩580👍381👏335333🔥148🥰144🫡11🤣7❤‍🔥5🤪3😍1
The 3CX supply chain attack was the result of previously undiscovered X-Trader supply chain attack

The 3CX CEO wasn't lying about an upstream vendor being the result of the compromise.

tl;dr supply chain attack to supply chain attack

More information: https://www.mandiant.com/resources/blog/3cx-software-supply-chain-compromise
😱12👍72😍2💯1
February 21st, 2023, ALPHV ransomware group informed their affiliates of a new 'product' update.

Their new ransomware variant is named Sphynx.
👍14🫡7🔥21
We've updated the vx-underground malware sample collection. We have added new samples for the following families:

- Nanocore
- AsyncRAT
- NetwireRAT
- AgentTesla
- LokiBot
- Formbook
- CobaltStrike
- NjRat
- Chaos Ransomware

Check it out here: https://samples.vx-underground.org/samples/Families/
14🔥7👍2