"Did you guys see my message?"

Want to know how good we are at seeing messages? It took us almost 2 years to reply to someone.

Also, thank you for the sample, RussianPanda. Apologies it only took us 2 years.

tl;dr if we don't reply in like, 3 or 4 days, don't be afraid to try messaging us again. We get a ton of e-mails, DMs, and messages every single day about all sorts of stuff (including people asking for the password, still)

The first VXUG APT exclusive! 🥰

2024-02-09, the Kazakhstan government reported state-sponsored Threat Actors targeting government officials with sugargh0st malware

Thanks to our friends in Kazakhstan we are the first to share them:)

Check it out here: https://vx-underground.org/APTs/2024/2024.02.09%20-%20SugarGh0st%20RAT%20attacks%20Kazakhstan%20%E2%80%93%20State%20Technical%20Service

No but seriously, this is the first time we've beaten VirusTotal and other AV vendors to a malware sample.

feels_good_man.exe

will you be our valentine?

The crime section is now public. It's pretty empty, but it's a work in progress.

Have a nice day

https://vx-underground.org/Crime

Mozilla has laid off 60 people and announces they want to incorporate AI into Firefox

It's over

https://arstechnica.com/gadgets/2024/02/mozilla-lays-off-60-people-wants-to-build-ai-into-firefox/

Today the United Kingdom's National Crime Agency released an advert reminding YOU about the Computer Misuse Act

Ditch the noscript, it's a crime.

you're all a bunch of god damn criminals and you're going to jail forever and ever and ever

Hello, how are you?

Selling merchandise has been an extremely painful task. We profit almost nothing from merchandise, roughly $5 per item sold, because it is all handled by an external manufacturer

When individuals are upset over merchandise, and request a refund, we lose A LOT of money which we already do not have.

We will be closing the merch store soon due to frequent refunds. We are losing money right now.

A few notes:

1. The store will come back at a later time. We need to assess our ability to sell merchandise, at a reasonable price, and doesn't financially hurt us.

2. We will still be selling harddrives on the store (when they're back in stock)

tl;dr customer support is dumb

The United States government has placed a $10,000,000 bounty on the leaders of ALPHV.

Additionally, any individual conspiring to participate in or attempting to participate with ALPHV has a bounty of $5,000,000.

https://www.state.gov/reward-for-information-alphv-blackcat-ransomware-as-a-service/

Today the United States Department of Justice was busy.

1. Vyacheslav Igorevich Penchukov a/k/a Tank was arrested. He was allegedly involved in the Zeus botnet and IcedId banking trojan

2. Mark Sokolovsky, developer of Raccoon Stealer, is scheduled to be extradited to the United States from the Netherlands

3. The Department of Justice announces the disruption of a botnet operated by the Russian GRU a/k/a APT28

We've updated the vx-underground crime section. We have added dozens of court cases, past and present.

We have a lot of work to do:)

https://vx-underground.org/Crime/Legal%20Rulings

Believe it or not, this is not a Unicode error. This is the child of a SQL developer

An individual online reported unusual activity when trying to charge their sex toy.

tl;dr vibrator downloads Lumma stealer?

https://tria.ge/240215-xvx86seb91

It is Sunday. Today is a day for rest.

See ya tomorrow

Today an unknown individual uploaded what appears to be sensitive Chinese government documents... to GitHub. They're labeled "IS00N".

Researchers have already begun digging in and sharing their key findings and opinions.

That's a Monday type of thing though. It is Sunday.

We'll keep you all updated, tomorrow. Have a nice night.:)

tl;dr archived stuff, see link below

Earlier today a GitHub noscriptd "I-S00N" leaked supposedly sensitive Chinese government data - specifically related to offensive cyber security.

The initial discovery, and documentation of the documents, derive from AzakaSekai_. We have archived his research and notes on the material.

It should be noted that they *probably have not covered the material in totality and more information can be expected to be released in the following days from either Azaka, or other Cyber Threat Intelligence experts familiar with Chinese state-sponsored activity.

Furthermore, the materials are written in Mandarin. We have made no attempt to translate the material to English and we do not speak Mandarin, hence we cannot provide any opinion or speculation on the material. We will leave that painstaking task to individuals who speak Mandarin, or people who feel like trying to translate the documents accurately.

What an exciting start to the week:)

You can view the archived materials here: https://vx-underground.org/APTs/2024/2024.02.18%20-%20Summary%20of%20I-S00N%20leaks

Someone in China is having a very bad day