14367
The largest collection of malware source, samples, and papers on the internet. Password: infected Website: https://www.vx-underground.org/ vx-underground Telegram chatroom link: https://t.me/+njfLzUrqos01ZWNh
Someone found more vx-underground graffiti in Bletchley, England.
You nerds are gonna make law enforcement think we're a cult or a gang 😭😭😭
Xitter Grok AI summary of vx-underground.
Everything listed in this was mentioned in some capacity over the years of our existence. Someone, somewhere, is training off our stuff.
Thank you to the person who made this. It is very cute. It is appreciated.
Читать полностью…
We were told that our memes are "cringe" and read like they're written by a middle-aged man. Those criticisms are accurate — they are indeed cringe and the average age of vx-underground staff members is like, 35. We're not cool and young, we're old and achy
Читать полностью…
We're sending somewhere between 10 to 20 files per second to VirusTotal — a little over 2,000,000 API requests per day.
Читать полностью…
> be afk on sunday
> get on pc
> check emails and dms
> *scroll* *scroll*
> tons of ppl sending pics of their animals
> *scroll* *scroll*
> schizophrenic messages
> *scroll* *scroll*
Very cool. Anyway, we've got a bunch of stuff queued. We'll do it tomorrow, maybe, probably?
Another gem from our emails and messages: someone keeps sending us photos of their cat and saying "big". That is all they say — that is the entire point of the conversation. We have no idea who they are or what they want.
Читать полностью…
> afk all saturday
> get home
> check emails and messages
> *scroll* *scroll*
> cat pics
> *scroll* *scroll*
> schizophrenic messages
> *scroll* *scroll*
> message from someone on fbi most wanted
Normal weekend
We thought us posting bullshit online and memeing was like, whatever. Today we learned actual large cybersecurity vendors do indeed actually pay attention to us. Now we wonder how many of you are actually feds.
Читать полностью…
Let's discuss university degrees and whether or not they're required for cybersecurity.
This may come as a shocker to some people, but universities are higher education institutions. Universities are not job fairs. If you attend a university your primary objective is to get an education and hope that this can directly transform into getting a career where you can apply this knowledge. A university does not necessarily mean you're being taught cutting edge material and it does not guarantee a job anywhere.
An education is not the same as on the job experience and it does not directly correlate to what is (or is not) trending in the market place. Some employers discriminate against people who do not hold a degree because they believe the person may lack sufficient educational requirements for the position, but fail to realize on the job experience may be superior to a traditional higher education route.
If you've got a degree, that is very cool. Congratulations.
If you do not have a degree, that is very cool. Congratulations.
Cybersecurity is a unique career field in that there is no traditional career path to reach the 'end goal'. It is a flexible career field and can accommodate essentially anyone regardless of how they tailored their skills.
Having a degree does not make you a superior person. Not having a degree does not make you a superior person. We are all colleagues. Be nice to each other.
Enjoy your weekend.
Yesterday it was reported via TechCrunch and GossiTheDog that Microsoft has made, as what we describe, an oopsie doopsie.
Microsoft lost customer security logs for their cloud product from September 2nd - September 19th.
¯\_(ツ)_/¯
More information: https://techcrunch.com/2024/10/17/microsoft-said-it-lost-weeks-of-security-logs-for-its-customers-cloud-products/
> go to doctors office
> nurse comes in
> logs into room PC
> talks
> leaves room
> doesn't lock PC
Threat Actors: our malware is FUD, completely evasive, and is cutting edge.
Also Threat Actors: Hardcoded string letting analysts know how they feel about the new Google Chrome updates, also inadvertently making it easier to identify them.
Image via RussianPanda9xx
Anytime we hear about a big hack, or exploit, or some crazy news, 99.9% of the time its something ridiculously simple.
> cod exploits?
> "Trigger Bot"
> MGM hacked?
> called helpdesk, ask for password reset
> Trump hacked?
> login password request from aol account
wHy DoNt u Do UpDatEs DaiLy
Because we're constantly ingesting malware and papers. We prefer to do a weekly, or bi-weekly, or whatever, large update. It's easier.
In the meanwhile we'll just talk about criminal stuff and post dumb pictures.
Thank you for your support.
Also, thank you to the people for sending us photos of their critters. We have seen your messages. We appreciate you and your animals thinking of us.
- ahhahahhhaha
- 0xAm03113
- SariBezliGurme
- Z3r0n37
- jamiedukee
- _Catal1n
- enigmatikk_
- DevourYourNan
- BigDeuce814
- Chromium_uwu
- w2ppx
- _sem_e
- NSAShips
- ballsplate
- aylacroft
- rtaqqqq
- ArkovFR
- brend000000
- Biggiefat39
- 0xDEC0DED
- thy_cs6
- VesiRott_
We have a profound respect for the video game cheat makers and video game reverse engineers.
The video game cheat producers and video game reverse engineers are very much disenfranchised by the information security community.
There is an innate bias and condescending tone directed toward them because of the dislike of video game cheaters and the false belief that this skillset (video game reverse engineering) is not an applicable skillset in real-world scenarios. This cannot be further from the truth.
Individuals capable of reverse engineering video games and developing cheats for them are lethal. These people can easily transfer and apply this skillset to targeted application exploitation or weaponization.
We've had the privilege of conversing with some truly special and gifted young people. Unfortunately, we are not privy with this community in totality, but we wanted to take this moment to express our gratitude to people such as daaximus, JustasMasiulis, and namazso.
We have witnessed these individuals make considerable contributions to recent trendy research topics and, in our opinion, have been given insufficient credit for their work. Very few people seem to realize these people have been core contributors to recently re-discovered (or newly announced?) process injection techniques. Additionally, Namazso is in essence the primary person who produced code and information on the recent trend of stack spoofing.
Much love and respect to these people. We see you. We hope others do too. 🫡
Good morning, evening, or night.
We've made a large update to vx-underground. The initial update posted resulted in two posts — sorry.
Attached is a list of all additions.
Have a nice day,
why can't i hold all these malicious windows binaries
Читать полностью…
What do we define as schizophrenic messages?
1. People sending us rants about the CIA, NSA, or FBI harassing them (?)
2. People sending us long political messages (don't write us, write a politician)
3. People sending us messages thinking we're a criminal organization or cult
The Internet Archive users are reporting to have received this e-mail just moments ago.
It appears that the person(s) who compromised The Internet Archive still maintain some form of persistent access and are trying to send a message.
Information and photo courtesy of zenullfur
We've also had someone sending us the N-word every single day in protest of us not having a chatroom. They've sent us the N-word every single day since July.
Their persistence is impressive
Hello,
We are aware that someone has created a BlueSky named "vx-undergroundre". The account notes it is not official — it is essentially a repost bot.
We don't know who this person is, but it's not uncommon for people to do community off-shoots of our work.
We are aware of projects such as "vx-playground" and "vxchat tmp(3)" which act as small community groups to discuss malware.
We're super happy we inspire people to do stuff. We have no problem with it.
> post we might charge companies to get access to vxug so they stop leeching
> companies actually contact us asking for pricing and legal agreements to use for commercial usage
mfw didnt think wed get this far and actually have vendors contact us
Hello,
We were unaware the cute wizard cat image we used was associated with a cryptocurrency. We are not shilling cryptocurrencies, we just think it's a cute kitty cat. In other news, thanks to this discovery, we have found more cute wizard kitty cats.
Today following the disclosure of a Call of Duty Ricochet vulnerability which allows the arbitrary banning of users, another researcher operating under the moniker "Timoxa5651" disclosed a method to arbitrarily banning users under the BattleEye anticheat
https://www.unknowncheats.me/forum/anti-cheat-bypass/667333-bannleeye-banning-arbitrary-players-using.html#post4228108
Translation:
lmfao if u make an accnt or something named like, "420 Trigger Bot 420" n send ur ops a friend request the anticheat thinks they got a cheat loaded cuz of the "Trigger Bot" word. LMFAO 💀💀💀.theyll get banned n then u just tell everyone theyre cheaters. ez W