November 15th, 2023 the United States FCC (Federal Communications Commission) adopted new rules and regulations to prevent SIM Swapping. The document was released publicly November 16th, 2023.

It is a long and lengthy report from the FCC, in collaboration with various United States-based mobile communication provides (primarily AT&T, Verizon, T-Mobile, Tracfone, and US Mobile). It is 98 pages.

The report documents new requirements by the United States government to combat SIM swapping, as well as complaints and feedback from mobile communication providers and security researchers (mainly from Princeton University).

The document also very politely calls mobile communication vendors dummies.

The super-super-super tl;dr:
- Account biographical information (payment history, call history) are no longer valid forms of authentication

- All SIM changes must notify the customer of the change prior to the SIM change being completed (presumably via SMS or phone call, unless in person?).

- All providers must offer SIM locking features.

- All customer support representatives must undergo additional training to combat fraud

- All vendors must record SIM changes and store all information on it for at minimum 3 years.

We probably missed other important parts, but this document is really boring and painful to read.

You can read the full document here: https://docs.fcc.gov/public/attachments/FCC-23-95A1.pdf

You may not like it, but this is what social engineering looks like

December 4th, 2023 we will be doing one the largest giveaways we've ever done! =D

It is very exciting

Tired of seeing nerds arguing about C2's? Next time use some C4. EDR's struggle against C4

Starting 2025 EDR's come with a bomb disposal specialist

Dear nerds who purchased the complete vx-underground HDD collection,

We have cloned 8 HDDs. 12 are remaining prior to shipment. We receive our next remaining harddrives Wednesday, November 22nd. Once those are completed we will be shipping them out.

Dear nerds who keep asking if they can buy the HDD collection,

We will begin selling HDDs again sometime in December.

Hello,

We are aware a Threat Actor is framing us with the name "Vx-underground ransomware".

1. We are not Threat Actors
2. It is insulting that you'd think we'd stoop so low as to use Phobos

Really? Phobos? Why would anyone use that hunk-of-junk?

Students (ages 13+), we have some really exciting news for you all.

We are blessed with the opportunity to grant one of you a gift that will fast track your career in Red Teaming. We hope this gift will give a voice to someone voiceless.

Stay tuned.

Hello, how are you? This will be a long post. Please read carefully. Please review the subsequent post following this to see information on the course.

This is our largest giveaway ever. This ONLY applies to students formally enrolled in a school, college, university, technical institute, or trade school. The minimum age of entry is 13 years old. There is no maximum age limit.

We are gifting a Red Team course: Red Team Ops I and Red Team Ops II from Zero Point Security. This an extremely length course - 257 lessons which will allow you to establish a solid foundation in offensive security. This gift includes

- Red Team Ops I (177 lessons)
- Red Team Ops II (80 lessons)
- 180 days of lab access
- The Red Team Ops exam which is rewarded with a badge upon successful completion

This complete course costs $1,185. We hope this will give someone the chance to accelerate their career and receive a formal education in offensive security they otherwise couldn't afford.

How to apply:
1. You MUST prove you're a student. You must supply us with a student photo ID, student e-mail (if applicable, some schools do not provide a student e-mail), and any other material you possess to provide you're a student. Inability to prove you're a student will immediately disqualify you. No country is exempt from this giveaway.

2. Write us an e-mail at staff@vx-underground.org with the subject noscriptd: "Red Team Ops opportunity". In this e-mail provide a brief introduction to who you are, why you would like this course, and how you intend to use this course to further expand your education and your career, and any other additional information to compel us to select you. If we suspect you're using ChatGPT we will orbital nuke you off of this planet.

3. The submission deadline is December 31, 2023. We will review all submissions and a winner will be chosen February 1, 2024. We will announce the winner on Twitter and Telegram (their PII will not be displayed, only an alias) and they will be contacted via e-mail. The winner will have 5 days to confirm they've received the e-mail and acknowledge they've won. Failure to reply in 5 days will result in a different winner be selected. Pay attention!

4. The winner will be provided with additional details on how to redeem the course and begin their educational course when they believe they're free to begin

This giveaway wouldn't be possible without our friend RastaMouse. He is an incredibly kind person and we are grateful he was able to hook us up with this to gift it to someone else. We hope this gift will give someone a chance in accelerate their career and do something they believe they might not have had the chance to do.

Good luck to everyone who chooses to submit an entry. Have a nice day.

Red Team Ops I: https://training.zeropointsecurity.co.uk/courses/red-team-ops

Red Team Ops II: https://training.zeropointsecurity.co.uk/courses/red-team-ops-ii

We have received over 100 e-mails in less than 12 hours of our Red Team Ops I and Red Team Ops II giveaway.

Some of you have sent truly heartwarming and compelling e-mails. Some of you are unimaginably lazy, writing 3 sentence e-mails, really?

Hello, it is update Wednesday!

But, we are enjoying a pause on vx-underground stuff for American Thanksgiving break. No updates will be pushed to vx-underground today or Friday.

20 8TB external harddrives.

These will be cloned with 5.22TB of malware and mailed to nerds.

Please pray for any inspector who decides to mount these on a Windows machine to inspect them 🙏

Haha but fo'real though. If you're running Windows please proceed with caution, if Windows Defender or an AV is enabled - your computer will implode like a dying star.

There are more animes than stars in the observable universe and you nerds want to watch all of them

Students,

We are working to secure another educational course giveaway with a different accredited institution. This course will focus primarily on reverse engineering and malware analysis.

More details will be released as we approach Christmas.

Have a nice day.

WE'RE NOT DOING IT YET STOP E-MAILING US