14365
The largest collection of malware source, samples, and papers on the internet. Password: infected Website: https://www.vx-underground.org/ vx-underground Telegram chatroom link: https://t.me/+njfLzUrqos01ZWNh
https://micahflee.com/heres-the-source-code-for-the-unofficial-signal-app-used-by-trump-officials/
Читать полностью…
Had this interesting coding idea. I felt so inspired. I was telling my newborn son about it.
When I was explaining the idea to him he was staring into my eyes. I was so happy.
Mid conversation he shit his pants. When trying to help him he proceeds to piss in my face
In case you missed the drama:
The United States government paid for some fork of Signal created by an Israeli company. It was primarily used by important government officials.
Someone compromised it.
It contained phone numbers, emails, and snippets of conversations (???)
soldered my power cable to psu so it doesn't lose power
Читать полностью…
We are turning 6 years old soon.
Initially we used dark art, edgy imagery, and unusual graphics when doing updates to show how 'mysterious' and 'cool' we are
Fast forward 6 years later — we're collecting kitty cat pictures
This is your brain on malware:
The so called "Doctor" recommended coding which is visually demonstrative. Traditional programming apparently requires too much "critical thinking" and isn't as "rewarding".
Smh makes me sick
Went to the doctor today and the physician informed me I have a BMI of 60
Almost failed the test. By the grace of God I still passed 🙏
Awhile back we met this guy on Twitter. He had like, 1,000 followers (relatively unknown). He was making posts about using AI to cheat coding interviews and getting jobs. He memed the entire thing. He dropped out a very prestigious university to continue this idea on memeing job interviews with AI.
We spoke with him on Twitter, discussing specifications on his ideas. We memed. Sent cat pictures.
Fast forward, he's now rich. What the fuck? How do we meme our way to $100,000,000?
In a bit of irony, the famous 2004 commercial "Piracy, It's A Crime", used pirated font.
It was discovered by a Redditor (and later confirmed by various news outlets), that the font used in the advertisements uses "Xband-Rough" by Just van Rossum. The font that was supposed to be used was "FF Confidential" by Just van Rossum
Sky News reached out to Just van Rossum for comment, Just van Rossum stated "[he] wasn't concerned". Additionally, per media outlets, there is currently no evidence on whether or not "Piracy, It's A Crime" intentionally pirated the font.
However, there is no legal clause that grants exemptions based on accidental copyright violation (although enforcement varies, Mr. van Rossum likely will not press charges)
JEFFREY, THIS ISNT A VALID LEGAL STRATEGY
STOP. TALKING.
For the record, we've known a few people to actually lock in and actually dig through the library. We know C5pider has read quite a bit from it, he ended up making Havok C2 and being big brain. He also know rad9800 read a bunch of it, he's also insanely big brain.
Both these dudes are like, 20 or something, and are dangerously smart.
We also know 5mukx has been locked in pretty hard and digging through the library too. He's taken the painful task of translating and re-writing the C/C++ code into Rust to improve his understanding of malware and improve his Rust programming skills.
Shoutout the young bloods. They got so good, we've been adding their content and research into the library now.
Malware paper statistic breakdown:
Windows malware development papers:
721 papers
Malware analysis papers:
12,293 papers
Linux malware development papers:
65 papers
ICS/SCADA malware papers:
94 papers
the anime store owner seeing a tsunami of stinky nerds holding pictures of cats enter their store
Читать полностью…
That's not a typo. The paper is actually says, "for pun and fropit". It discusses polymorphic mutation in JScript.
Читать полностью…
Have deleted opinionated post.
More details have emerged which allegedly depict Mr. Bowie walking around a healthcare facility trying to get access to machines without hospital authorization.
No idea what's going on. All we know is Mr. Bowie should hire a lawyer.
Drama++
The United States government is using a fork of Signal called "TM SGNL". TM SGNL is (likely) produced by an Israeli firm (Smarsh) which is (or related to in some capacity) the Israel Defense Forces' Intelligence unit. Although these claims are based on self-described biographies of the creators of TM SGNL and publicly available information. Various journalists and media outlets have reported differently.
TM SGNL is a part of the Smarsh communication suite called TeleMessage hence TeleMessage Signal.
TM SGNL is not publicly available for download.
TM SGNL source code was leaked online May 3rd when an anonymous source tipped journalist Micah Flee about TM SGNL being available for download ... by accident. Smarsh left the source code to their application exposed because they used WordPress and misconfigured directory permissions which looked like so:
/wp-content/uploads/2024/12/Signal-iOS-main.zip
/wp-content/uploads/2024/12/Signal.zip
Journalist Micah Flee has made the source code available on GitHub. The source code also includes hardcoded credentials (and got knows what else)
You can read more about the leak, the contents of the leak, and you can find the link to the source code in the attached article below.
Been busy but — WikiLeaks is going schizo and falling down the rabbit hole. Political nerds are throwing feces at each other and screaming. Semi-normal Twitter users are ignorantly speculating on technology they don't understand.
Читать полностью…
Thank you Telegram nerds for 56,000 subscribers.
That is a very big number on Telegram. I hope we aid you in some capacity and I look forward continually serving all of you with malware and malware accessories for the next ??? years.
Love you,
- smelly smellington
tfw maxxed out hdd space (40tb) from malware samples
Читать полностью…
Decided to read my newborn Windows internals. He likely won't remember everything, but the habit of reading boring literature will prepare him for C programming when the keyboard isn't larger than his body
Читать полностью…
Congratulations, Roy. We're happy your crazy memeing some how made you profoundly wealthy and got investors.
Читать полностью…
tl;dr piracy is bad commercial does piracy to save a few bucks
Читать полностью…
This is important information pertaining to cybersecurity and artificial intelligence
Читать полностью…
hOw Do I lEaRn MaLwArE StUfF
If you're new to malware stuff, and want to learn malware stuff, go to our paper collection.
If you read 10% of our malware analysis paper collection (took notes, seriously understood it), you'd be a fuckin' monster.
If you know how to code (Python, C, C++, .NET), and visit our malware development section and read about 40% of the papers (took notes, seriously understood it), you'd be a fuckin' monster.
You'd have a powerful understanding of malware analysis, malware development, the malware threat landscape, malware threat groups (state-sponsored or financially motivated). You'd jump from absolute noob dumbie to Subject Matter Expert lightning fast.
Unfortunately, this also requires you to lock in pretty damn hard. You'd have to seriously dedicate yourself. However, if you could do 2 or 3 papers a day, in about 12 months, you'd be ridiculously well versed in malware. But you'd (probably) burn and crash out pretty fast at this rate because the amount of information you'd be ingesting would be astronomical.
Anyway, if you want to actually learn, we have a massive-fuck-off-library of malware educational resources waiting for you.
Updates to the VXUG collection:
- 2020-08-15 - Kernel Mode TCP Sockets LSASS Dump
- 2025-01-05 - Reliable system call interception
- 2025-01-19 - C2 infrastructure on AWS
- 2025-01-23 - Pitfalls of COM activation
- 2025-01-23 - Operating Inside the Interpreted - Python Malware
We should do some kind of weird impromptu malware meetup. Like, we all show up at an anime store or something and exchange our favorite pictures of cats.
Читать полностью…
Updates to the vx-underground collection:
- 2007-01-15 - Using the .NET runtime for file infection
- 2007-01-15 - Polymorphic Mutation in Powershell
- 2007-07-11 - Playing with JScript for pun and fropit
- 2007-07-17 - Writing a Polymorphic Mutation Engine in C Sharp
Originally the headlines and articles (which presented little information) painted a picture of an Insider Threat potentially aid and abetting Threat Groups.
Now it gives the picture of a misunderstanding and potentially the United States Federal Bureau of Investigation doing a poor job in regards to cybercrime.
Historically we have believed the FBI has done a great job with cybercrime. We have seen them takedown large and sophisticated Threat Groups. In this case (based on the details presented thus far) the FBI of Oklahoma has done a poor job and is chasing a non-issue.
tl;dr sounds like a shit show