14365
The largest collection of malware source, samples, and papers on the internet. Password: infected Website: https://www.vx-underground.org/ vx-underground Telegram chatroom link: https://t.me/+njfLzUrqos01ZWNh
For those who stated Mr. Urban may have spent his stolen money: (un)fortunately, because Mr. Urban has agreed to restitution, it is mandatory under federal law he repay the stolen money. If Mr. Urban does not have the full $13,000,000 he will have to do the following:
1. Establish a payment plan with the court system
2. Begin making payments while serving jail time (Inmate Financial Responsibility Program)
3. Payment toward victims continue even when sentencing is completed.
While Mr. Urban is in prison he will be "employed" in federal prison and earn money for his work — generally $0.40/hr. Although, Mr. Urban is capable of receiving a $30 bonus at the end of each month for good work.
Any money Mr. Urban receives from friends, family, or general employment will be seized and returned to victims until the total amount is returned. He cannot declare bankruptcy to avoid restitution. It does not "fall off" like traditional debts in the United States.
It is in Mr. Urban's best interest he has the full $13,000,000. Otherwise he will be paying restitution for the majority of his life.
In July, 2022 we created "VX Feed" — a Discord server which provides updates in-near-real-time from various websites and ransomware blogs.
We forgot it existed.
We checked on it today, it's still running. It's got several thousand members.
We could probably hire someone to do nothing except reply to people all day.
We don't have the money for it, but we have the volume of e-mails and DMs for it.
Sorry we don't reply, but we do appreciate the information shared, or kitty cat pictures shared.
-smelly smellington
You know what does well in a recession?
Cybercrime.
Threat Intel, Threat Actors, Defenders, Attackers — chat, we're so back. High 5s all around.
Uploading more malwares.
It's a lot, it takes a long time.
While we wait for this to finish (8 hours+), please look at this cat.
Have a nice weekend.
On April 1st, 2025 (No April Fools), the Russian FSB (Federal Security Service of the Russian Federation, Федеральная служба безопасности Российской Федерации), conducted a raid in St. Petersburg, Russia, on an IT facility named "Aeza Group".
Aeza Group is (rumored) to provide network infrastructure for Russia's Doppelgänger propaganda network. The location raided was once the home for Yevgeny Prigozhin's Wagner Center (tl;dr no idea who is stating these rumors, it's just news articles and Telegram).
Law enforcement agents allege the CEO, Yuri Bozoyan, and two employees of the organization, Maxim Orel and Tatyana Zubova, were arrested for aiding, abetting, or facilitating criminals groups. More specifically, the FSB asserts Mr. Bozoyan and his co-conspirators trafficked narcotics at large scale.
Additionally, it was (rumored) Aeza Group provided infrastructure for "darknet" groups and malware groups. However, we have been unable to find substantial evidence to support these claims other than various news articles (tl;dr who the fuck is saying this?).
A photo of the arrest was shared online.
There have been some misleading news articles circulating online that Texas, in the United States, is "banning anime". This is sort of misleading.
March 16th, 2025, some video game media outlets reported Texas, United States, is trying to ban anime, manga, and some Japanese-based video games.
The law passed by Texas senate (although not officially written into law yet) bans AI designed images, including cartoons, animations, and hand-drawn images, which depict a minor under the age of 18 in any "obscene" way. This was written to outlaw AI based CSAM (Child Sexual Abuse Material) or hand-drawn CSAM.
Due the ambiguous language of the law this places certain Japanese manga and anime in a legal grey area because some series such as Persona, Kill la Kill, Gurren Laggan, Monogatari, and Bleach — may depict individuals under the age of 18 in an "obscene" way.
There is no official call for a ban of these Japanese-based media.
tl;dr texas law ambiguously written, could accidentally do an oopsie, some places freaking out or exaggerating
Chat, we're smuggling goods into the United States from Canada, or Mexico, to sell things at a cheaper cost. First thing we're selling cheaper is Nintendo stuff and Anime.
🤝
just took an iq test. scored a 82. a B- isnt too bad!!!
Читать полностью…
>wake up
>take a shit
>get out of bed
>check news
>trump tariff penguins?
>wtf
omg hes tariffed tux
For our more serious audience:
We're close to finalizing our virus-dot-exchange, so we've begun moving things out of 'hibernation' and pushing it to prod. We've pushed nearly 100GB of malware. This includes VirusSign from January to April, Bazaar for January and February, and our "InTheWild" collection which is currently syncing.
A rough guesstimation would place the recently added malware somewhere near 500,000 new samples. However, I didn't count.
Cheers,
Multiple Threat Actors have magically disappeared.
Читать полностью…
Excited to watch some OGUsers nerd drop $50,000 for the Xitter handle "poop"
Читать полностью…
Today EUROPOL announced the takedown of a large and prolific CSAM (Child Sexual Abuse Material) website known online as "Kidflix" — a reference to Netflix.
Over 35 countries were involved in the operation which was lead by the State Criminal Police of Bavaria (Bayerisches Landeskriminalamt) and the Bavarian Central Office for the Prosecution of Cybercrime (ZCB).
Kidflix was infamous due to it's "unique" features for CSAM websites. It allowed users to filter by video quality, watch child abuse livestreams, and preview videos prior to purchase. Additionally, individuals who were active on the website, shared content, produced unique content, etc. could earn "Kidflix tokens" which allowed them to get other CSAM material for free. Furthermore, the site had 3.5 unique CSAM videos uploaded every hour, with a total of 6,288 hours (262 days) of CSAM videos present on the website.
Law enforcement learned over 1,800,000 people from all across the globe visited Kidflix. Kidflix contained over 72,000 videos of CSAM.
As a result of the takedown over 1,400 suspects have been identified and (thus far) 79 individuals have been apprehended and 39 children has been rescued from child predators.
This operation, dubbed "Operation Stream", is the largest pedophile network takedown European history. EUROPOL has stated they will continue to work with other countries law enforcement agencies to hold each person accountable for the crimes committed on Kidflix.
hehe whoopsies, accidentally did something, didnt undo change, and got pwned (we were working in prod)
Читать полностью…
April 4th Noah Urban a/k/a "King Bob", an alleged member of the infamous "Scattered Spider" group, plead guilty to all charges in all cases.
Mr. Urban has two cases. One case is in Florida, United States. One case in California, United States.
Per court documents Mr. Urban, as a member of what Threat Intelligence defined as "Scattered Spider", was responsible for:
- Social engineering company targets by posing as IT staff or Help Desk. Mr. Urban often used SMS or telephone calls to impersonate employees.
- Social engineer company targets, by posing as IT staff or Help Desk, toward remote access tools to provide access to other individuals within "Scattered Spider"
- Social engineer company targets to share one-time passwords used for MFA
- Monetized access to victim networks by extortion enabled by ransomware and data theft
Mr. Urban plead guilty to the following charges in Florida:
- One (1) count of Conspiracy to Commit Wire Fraud
- One (1) count of Wire Fraud
- One (1) count of Aggravated Identity Theft
Mr. Urban plead guilty to the following charges in California:
- One (1) count of Conspiracy to Commit Wire Fraud
Per court records, Mr. Urban took a plea deal which states Mr. Urban must forfeit stolen money to each victim individually (restitution) with the sum being in excess of $13,000,000 between 59 individuals. Additionally, Mr. Urban waived his right to pay restitution to victims not listed in official court paperwork — meaning he may have to pay more at a later period of time if more victims are identified.
Mr. Urban has agreed to forfeit the following toward victims: "Dai", "Ethereum", "Monero", "Bitcoin", "Ripple", as well as any cash in Mr. Urban's possession and any physical item worth sufficient value (undefined).
Mr. Urban, despite taking a plea deal and agreeing to restitution, is still subject to sentencing. Mr. Urban official sentencing is expected to take place on or around Friday, June 20th, 2025.
Mr. Urban is facing a maximum sentencing of 82 years in prison. However, per standard sentencing guidelines and because Mr. Urban has taken a plea deal, he will receive a much lighter sentence. The Aggravated Identity Theft charge in Florida carries a mandatory two (2) years in prison.
We also appreciate all our "sleeper agents".
Anytime we make a post about: an arrest, breach, or Threat Actor, we always have at least 1 or 2 people who contact us who are familiar with the situation unfolding.
I love you so much.
tl;dr vx-underground hive mind
Rest in pepperoni to our software engineers though. They're absolutely cooked. They're facing AI and a recession — they're fighting a war on both fronts.
Читать полностью…
On April 1st, 2025 (No April Fools), the Russian FSB (Federal Security Service of the Russian Federation, Федеральная служба безопасности Российской Федерации), conducted a raid in St. Petersburg, Russia, on an IT facility named "Aeza Group".
Aeza Group is (rumored) to provide network infrastructure for Russia's Doppelgänger propaganda network. The location raided was once the home for Yevgeny Prigozhin's Wagner Center (tl;dr no idea who is stating these rumors, it's just news articles and Telegram).
Law enforcement agents allege the CEO, Yuri Bozoyan, and two employees of the organization, Maxim Orel and Tatyana Zubova, were arrested for aiding, abetting, or facilitating criminals groups. More specifically, the FSB asserts Mr. Bozoyan and his co-conspirators trafficked narcotics at large scale.
Additionally, it was (rumored) Aeza Group provided infrastructure for "darknet" groups and malware groups. However, we have been unable to find substantial evidence to support these claims other than various news articles (tl;dr who the fuck is saying this?).
Edit: Commenters suggested "arrest" photo was AI generated. That is the photo that was shared. We agree it looks suspicious, so we've removed it. Instead have a nice photo of Mr. Bozoyan
Specials thanks to club31337 and banthisguy9349 for the information.
Читать полностью…
Many people seem to enjoy our malware builder collection (thanks to Cryakl). We're still refining it. However, due to it's sudden surge in popularity the Builders collection is now listed directly on the homepage.
Читать полностью…
mfw anytime anything happens and internet nerds go schizo
Читать полностью…
Nintendo nerds are going absolutely ballistic today.
Pre-orders to the United States are suspended until Nintendo can assess the impact of tariffs. Everyone else can pre-order still.
Shoutout Kertenkeleli for solving the question over 9,000 noobs were unable to do.
+1 cat picture
adding some computer viruses to the website haha u can download computer viruses for fun
virussign december - april
bazaar 01 and 02
inthewild ??? - ???
Ransomware groups will be raising extortion demands 10% due to Tariffs
Читать полностью…
Today X employees did a sneak peek on some new features. The main highlight is X will now allow you to purchase inactive X handles.
The attached image is the actual image shared by X. No idea why its green and formatted like shit.
Shoutout to zhangsansec for successfully compromising vx-underground.
A few days ago we put vx-underground in a debug state. We forgot to revert it back.
zhangsansec discovered this, exploited it, and instead of memeing us he notified us so we could fix it