Hey Alexa, play "Money In The Bank" by Lil Scrappy.

Just kidding. We don't own an Alexa, or any of that IoT bullshit. God forbid it's compromised and some TA dumps 500 terabutts of peoples conversations in .mp3 format

Registering on a website and trying to calculate the probability of it being compromised (use a burner e-mail or the real e-mail)

tl;dr 1st lesson of cybersecurity, verify your identity to bishopfox without detonating malware on your machine (we failed)

"i work in tech" simulator

A Russian ransomware affiliate we know sent us this video.

Very cool.

Thank you for educating us on your culture. 🙏

Someone sent us an e-mail saying they have some malware samples they can send us.

We eagerly replied and thanked them.

They replied saying the samples "are for sale" and asked how much we'd pay for them.

The current street value of malwares (decent quality) is $1,200 for 7,500,000 malwares.

A curated set of high quality malwares is roughly 15,000 malwares for $3,000.

It's hard to get high quality samples unless you're an AV and/or EDR vendor.

We're finally updating the site this week.

The poop posting will end soon.

Okay we won't stop poopy posting

Here is the process in which we add papers to vx-underground.

1. Find papers (Twitter, blogs, searching online, people sending them to us, etc)
2. Reviewing the paper, ensure it is legitimate, authentic (not copy-paste), and applicable to what we collect
3. Use PrintFriendly to download and transform into readable PDF format
4. Name file appropriately, try to find date of release or approximate date of release, to name it in format such as: "2024-01-05 - Malware Paper Title.pdf"
4.a. If paper contains code or images, place the contents in 7z file that is named after the paper such as: "2024-01-05 - Malware Paper Title.7z". If the content contains an executable file format, password protect the 7z.
5. Take copy, store locally in vx-underground backup NAS
6. Write down new addition in Notepad++ text file to keep track of recent additions (we're ghetto)
7. Once we have a bunch ready to go, push the giant collection of papers to prod.
8. Announce the additions on Twitter and Telegram
9. GOTO 1

We've been doing this cycle, in some form or another, since August 2019. It doesn't sound like much — but as vx-underground grows in size it becomes a lot more painful, tedious, and exhausting.