vx-underground – Telegram
vx-underground
45.8K subscribers
3.93K photos
419 videos
83 files
1.43K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
I honestly expected to just reverse engineer this shitty ass fuckin Block Blaster drainer bullshit and go on about my day

The past 2 days has been fucking insane with victims coming forward, people being extorted and threatened, all sorts of shit

What the fuck is crypto bro
🔥62💯18😢175🤣4👏1🎉1
vx-underground
I honestly expected to just reverse engineer this shitty ass fuckin Block Blaster drainer bullshit and go on about my day The past 2 days has been fucking insane with victims coming forward, people being extorted and threatened, all sorts of shit What the…
I was in some weird ass chat with drainers arguing and going schizo on each other. Seeing people dox and threaten violence on others

I have no fucking idea wtf is going on dawg I just like malware and cats wtf am I doing here bro
🥰6512🙏11🤣6🔥4👏1🤯1😢1💯1😇1
I received a message today from an ex-affiliate of Lockbit ransomware group who is currently on FBI's Most Wanted.

He told me he thought it was disgusting someone would cryptodrain a cancer patient.

dawg this guy ransomed elementary schools. even he thought it was too low😭
🤣18530😁16😱4👍3🤔3😢3🥰2🫡1
vx-underground
I received a message today from an ex-affiliate of Lockbit ransomware group who is currently on FBI's Most Wanted. He told me he thought it was disgusting someone would cryptodrain a cancer patient. dawg this guy ransomed elementary schools. even he thought…
this guy extorted elementary schools, governments, businesses (large, medium, small), even shit like police stations

bro said, "wtf why he rob a cancer patient?" 😭😭
79😁32🤣17😢9👍6🔥2🤓2🥰1🤔1
I forgot there is a huge chunk of people who aren't in information security and missed the entire VXUG TMZ era where we met people from FBI Most Wanted, the Taliban, got electronics from North Korea, and got sent cat pictures from the FBI

2022 - 2023 VXUG was crazy
76🔥34😎8🤔6🥰4💯3🤣2👍1😱1😢1
vx-underground
I forgot there is a huge chunk of people who aren't in information security and missed the entire VXUG TMZ era where we met people from FBI Most Wanted, the Taliban, got electronics from North Korea, and got sent cat pictures from the FBI 2022 - 2023 VXUG…
Image 1. Sending FBI Lockbit rewards a cat picture on Telegram. It is designated for anonymous tips.

Image 2. Tablet from North Korea received

Image 3. Autograph from Mikhail Matveev
95🤣41🥰16🔥9😎6👍1😢1
Bad news for docker torrent nerds today.

Hotio docker container thingy for Linux torrent stuff was poisoned and contains an XMR miner (XMRig). One of the developers memed intentionally poisoning it last year (???)

Chat, what is going on?

https://apogliaghi.com/2025/09/crypto-miner-in-hotio/qbittorrent/
😱46😁156🤣3🎉1
Weird thing to say on Discord. Hopefully it was just a meme and bro wasn't really scheming to XMRig tons of people
😱42😁20🤣16💯42😢1
Day in the life of working at vx-underground:

> Wake up
> Take a shit
> Get out of bed
> Scroll MISP looking at malware
> Download malware
> Skim some papers
> Skim DMs (cat pictures and stuff)
> Scroll MISP looking at malware
> Spam cat pictures randomly
> Go eepies
91🥰23🤣20🫡5👏3😢1
vx-underground
I received a message today from an ex-affiliate of Lockbit ransomware group who is currently on FBI's Most Wanted. He told me he thought it was disgusting someone would cryptodrain a cancer patient. dawg this guy ransomed elementary schools. even he thought…
There appears to be some confusion about this post and how groups such as Lockbit operate.

Lockbit offers a "service" of ransomware. He gives you a pretty panel, some tools for making ransomware (his), a chatroom to harass victims and bully them, etc.

In exchange for him providing this service he takes a cut of any money you receive from ransoming companies.

Lockbit ransomware group did ransom hospitals. However, it was not "Lockbit" the "service" provider. Rather, it was someone who used his service.

The people who use this service are called "affiliates".

At Lockbits peak they had over 100 affiliates. Some affiliates did ransom hospitals. This particular affiliate who messaged me, who is FBI Most Wanted, believed it was unethical to ransom healthcare because it could potentially endanger someone's life. Although, he was still a criminal and harassed, bullied, and extorted companies of all sizes including public schools. One time he ransomed a car wash. He didn't care.

Anyway

Lockbit themselves (the "service" provider) allowed affiliates to ransom hospitals because ... they didn't really care. Lockbit (the service provider) approved of schools, churches, non profits, hospitals, doctors, government agencies, etc. to all be victims of ransomware. He didn't really have exclude anything. Nothing was off limits.

Lockbit (the service provider) made an estimated $1,000,000,000 from their crimes as providing this service and facilitating ransomware all across the planet.

One administrator resides in Russia. The other (ex administrator) was located in Israel. However, he was arrested and deported to the United States some time ago when the FBI found him.
🤣6622🥰12👍2👏2🤔1😢1🫡1
Yesterday someone was being very silly and defaced Nintendo's topics page. Nintendo has restored the deface.

No data was stolen.

Archive: https://archive.ph/n5Lgp
😁46🥰117🔥3👍1😢1
🤣6933🥰6👍1🤔1😢1
This media is not supported in your browser
VIEW IN TELEGRAM
me getting on the computer when someone needs pictures of cats
41😁18🔥11🤔3🥰2❤‍🔥1😢1🤣1
> 2 day ago
> collins aerospace hit by ransomware
> 5hrs ago
> "hardbit ransomware" did it
> 1hr ago
> nca arrests hacker for collin aerospace attack

wtf
🥰70🤣358👏4😁2😢1🫡1
vx-underground
> 2 day ago > collins aerospace hit by ransomware > 5hrs ago > "hardbit ransomware" did it > 1hr ago > nca arrests hacker for collin aerospace attack wtf
tldr ransomware arrest speedrun attempt

p fast at being busted, doesnt top gta extortion guy tho. bro got caught in like, 12hrs. thats an all time record. hard to beat that
😁73👏138🎉3😢1
Wtf the guy they arrested for the ransomware attack against Collins aerospace thingy was in his 40s

He's gonna be charged as a terrorist.

What was he thinkin
😁6612🫡11😢7🤣6🤔4😱4🥰2👍1💯1
vx-underground
Wtf the guy they arrested for the ransomware attack against Collins aerospace thingy was in his 40s He's gonna be charged as a terrorist. What was he thinkin
I immediately thought I'd be a com kid just being a menace to society. Dude is too old for this shit. He's gonna be released when he's 95
😁57🫡247😢4💯4🤣4🥰2🤯1
Hello,

Someone in the com supposedly has a really cool and badass piece of malware I'm really interested in. I've been trying to find the nerd who has it for like, 2 days, and I've messaged every com person I know (like 5 people)

I really really want to see this Terraria malware payload.
62🙏16🤔13🤣10😁3😱3❤‍🔥2🤝2😎2🥰1😢1