We recently had a few people ask us if we dislike CTI (Cyber Threat Intelligence) because we occasionally meme them online.

No, in fact we very much like them. We enjoy reading the DFIR reports, notes and theories on how financially motived and/or state-sponsored groups operate, and we enjoy reading the geopolitical backgrounds and/or influences on groups. This field of research is profoundly valuable to our line of work because these factors influence malware development in more ways than one. We are big fans of research performed by groups such as Mandiant, Cisco Talos, Recorded Future (and/or Insikt Group), Intel471, CrowdStrike, and Threat Intel adjacent groups like TheDFIRReport.

Our primarily criticism of Threat Intel is not the large vendors, it is the trickle down effect from Threat Intel. For example: Mandiant may publish a paper on APT28. Following the release of their research it is inevitable that a smaller or lesser known Threat Intelligence company(ies) will regurgitate Mandiant's findings, only to slightly distort it, thus making it inaccurate or altered in some form from the initial source. As this trickle down effect continues the information becomes more and more distorted and inaccurate leading to misinformation.

We also just meme and shit post because our online account is ran by 3 people with a combined IQ of spaghetti. Sometimes we put little-to-no thought into how people will respond to memes.

We've updated the vx-underground Crime/Legal rulings collection. We've completed years 2020 - 2024. Documented cases cover:

- Dark Overlord Group
- CardPlanet
- Equifax Hack
- Helix Mixer
- The Twitter Hack
- FastPOS
- Team Xecuter
- QQAAZZ Group
- FIN7
- Bitcoin Fog
- Trickbot
- Kelihos Botnet
- REvil ransomware
- Hydra Market
- Sandworm a/k/a Cyclops Blink
- Ryuk ransomware
- Netstalker ransomware
- Lockbit ransomware
- BreachedForums
- RaidForums
- Mt. Gox Hack
- Conti ransomware
- Callisto Group
- WarzoneRAT
- RaccoonStealer
- Lazarus Group
- APT41

... and a lot more

Check it out here: https://vx-underground.org/Crime/Legal%20Rulings

exciting news coming

(if you have friends and like cash prizes)

cya soon

We've updated the vx-underground malware sample collection.

- Virusshare.00485
- Virusshare.00486
- 92,000+ new samples

All samples have been synced the VXDB 🫡

We will be hosting our first ever VXUG trivia night. On March 8th teams of friends (or cats?) will answer malware and/or Threat Intel related questions for a chance to win money.

1st place: $500
2nd place: $250
3rd place: $100

Sponsored by Malcore 🙏

(More info soon)

4th place will be a coupon to Taco Bell, or Robux or a crusty sock, or something, we haven't gotten that far yet

It is honestly insulting someone would use our name and deface it with shitty AI art and ... Netflix fraud? Really?

This isn't real but it is insanely funny

"When we catch you, me and NCA are going to take turns running you over with your own Mercedes."

😂😂😂😂😂😂

Hello,

We are trying to get enough followers on Twitch to unlock some Twitch features. If you're a person who uses Twitch and would like to support us please follow vx-underground here:

https://www.twitch.tv/vxunderground_live/

This is fucked up

American Fast Food restaurant Wendy's CEO announced they're considering introducing 'price surging', where food prices fluctuate based on demand

pov: in line watching baconator cheeseburger go from $5 to $20 in-real-time

> Get United States court system RSS feed
> Monitor each District Court (updates every 24hrs)
> Find non-DOJ announcements on cyber criminals

March 1st, 2024 Yaroslav Vasinskyi, the individual responsible for the REvil Kaseya supply chain attack will be sentenced.

His sentencing has been continuously been post-poned and rescheduled since 2022. He has been sitting in a county jail waiting for almost 2 years.

PLAY ransomware group,

Your contact form is lame. Contact us.

Thanks,

2020 was peak internet. We need to bring back Anus Fingerpints

Good morning, how are you? We have some advice we'd like to share.

If you cheat on your significant other with a sex worker it should be advised that you do not take photos of it. Additionally, you should not save it to your work computer.