"The ransomware is always encryption software on the other side", - Vladimir Vladimirovich Putin, probably

We are postponing vx-underground trivia night to March 15th, 2024. Helen got COVID19 😭

Today it was announced Akira Toriyama, the creator of Dragon Ball, passed away. Today will act as an international day of mourning for all Dragon Ball nerds for all memories and memes Mr. Toriyama brought us.

More information: https://en.dragon-ball-official.com/news/01_2499.html

No updates today

I love you

1 like = 1 malware 🙏

Let's address the elephant in the room.

If a ransomware group resided in the United States, publicly swore allegiance to the United States and all allies of the United States, and only deployed ransomware to Russia — would Law Enforcement or Cyber Threat Intelligence care?

Our opinion: probably not. However, they would 100% care about the money laundering and/or tax evasion. The United States IRS doesn't mess around. They WILL get their money one way or another.

Why are these dorks selling stuff off vx-underground? Also, those are builders, not the source code. The source code is on GitHub

No updates again this Sunday.

I love you so much, omg

Hello,

If you like vx-underground please consider donating. Every dollar helps us and allows us to do cool stuff like archive more malware, archive more stuff from pacer, and do giveaways.

Thank you. I love you.

Become a monthly donor here: https://donorbox.org/vxug-monthly

"Can a .txt file be malicious?"

Short answer: No

Long answer: Anything is possible through the power of Windows HKEY_CLASSES_ROOT

tl;dr modify shell open command (default) to malicious payload with subsequent invocation of text editor + parameters. The .txt file won't be malicious, but the thing responsible for opening them will be

¯\_(ツ)_/¯

just bought the first lambo 🙏

41 Ubuntu's deep on a Tuesday afternoon

Hello, how are you?

Apologies for the delays. We've been knee deep in lame stuff — real-world responsibilities, or something. Anyway, we've got a bunch of nerd news to share, list of content additions, things we need to upload to the VXDB and more.

Full list of additions below...

Family Updates:
- AveMaria
- Azorult
- BlackwoodLoader
- CherryLoader
- Grandoreiro
- IcedId
- KasseikaRansomware
- KrustyLoader
- MortisLocker
- QakBot
- SmokeLoader
- SubtlePaws
- VileLoader
- WikiLoader
- YoungLotus

Collection Updates:
- Virussign.2024.03.06
- Virussign.2024.03.07
- Virussign.2024.03.08
- Virussign.2024.03.09
- Virussign.2024.03.10
- Virussign.2024.03.11
- Virussign.2024.03.12

Malware Analysis Papers:
- 119 new papers added for 2024
- 17 new papers added for 2023
- 16 new papers added for 2022
- 6 new papers added for 2021
- 6 new papers added for 2020
- 14 new papers added for years 2011 - 2019

VXDB notes:
- VirusSign and VirusShare recent additions have NOT been synced with VXDB
- Approx. sync date is 2024-03-16

Thank you for waiting, sometimes it is difficult running the largest open-source malware repository on the internet.

More to come soon. I love you.