vxunderground | Unsorted

Telegram-канал vxunderground - vx-underground

40629

The largest collection of malware source, samples, and papers on the internet. Password: infected https://vx-underground.org/

Subscribe to a channel

vx-underground

I like to imagine a bunch of military bros at some fuckin base wanting updates on malware and I'm just schizo ranting about my general distrust for the United States government and spamming cat pictures

Читать полностью…

vx-underground

A story in two images.

Читать полностью…

vx-underground

Hello,

More updates being pushed to prod tomorrow. Also have some mildly interesting news to share related to something we sometimes do.

Additionally, my son will be turning 1 years old soon. Feel old yet?

Cheers,
-smelly smellington

Читать полностью…

vx-underground

The new AI powered Notepad on Windows 11 was found having a Remote Code Execution 0day

Hot take: text editors don't need network functionality

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841

Читать полностью…

vx-underground

ok sorry if i sound extra critical, it's just weve had this conversation before with other things in the past and nothing really changes, so now i need to be mean.

ily ok? im just grumpy and eepy.

Читать полностью…

vx-underground

Discord knows everyone will bitch and moan on the internet, SOBBMAXXING, but 99.9% of people will hand over their identification. They'll be scared, or reluctant, but they'll do it anyway so they can keep their yellow badge in their Harry Potter Fan Fiction Roleplay Discord

Читать полностью…

vx-underground

For those curious regarding Epstein files redactions and general information: based on Mr. Massie's visit to the United States Department of Justice today, and his "hint" of this being from "A Sultan", this implicates Sultan Ahmed bin Sulayem.

Around April, 2009, footage was leaked of Issa bin Zayed Al Nahyan a/k/a "Isa", son of Zayed bin Sultan Al Nahyan, beating an Afghanistan merchant. In the video, Isa does the following:
- Hog ties him
- Beats the man with a wooden plank, with nails protruding
- Fires an automatic weapon around the man
- Forces a cattle prod into the mans anus
- Places the cattle prod onto the man
- Runs the man over with a Mercedes SUV
- Ignites the mans genitals with lighter fluid
- Pours salt on the wounds

All of this was performed while Abu Dhabi police were present (seen in the video).

Issa bin Zayed Al Nahyan was found not guilty in court. The Judge proceeding over the case did not explain why Isa was exonerated on all charges.

This appears to be the video Epstein "loved".

Читать полностью…

vx-underground

tl;dr SmartLoader malware campaign, multi-staged obfuscated Lua payload to evade detection, currently very effective. Interesting malware find.

Some nerd named bleuonbase was looking for some random "Effect-native SDK" (whatever that is), the 2nd indexed URL on Google was a spoopy looking GitHub repo.

He showed it to me. I was bored (I'm very sick), so I poked it with a stick. To make a long story short, this looks like a new malware campaign from SmartLoader

The thing is an obfuscated Lua Loader and it comes packaged with the traditional Lua dependency junk (Lua JIT and DLL). The payload launches from a .cmd which just passes a .txt to the Lua JIT binary. This is all standard stuff for SmartLoader from early and mid 2025.

If you're curious, lookup the SHA256 for the obfuscated Lua script on VirusTotal: c36ce9080f624c14dd4e1d451228293f786168f4de2d35690d2cffb6cccbae87 (Image 1)

You'll see some of the other thing it's trying to masquerade as. This is all very silly shenanigans.

It's currently exfiltrating to some German IP address and inserting fake Cloudflare headers to make it look like it's Cloudflare: 213.176.73.145

Look up that IP address on VirusTotal and you'll see even more silly shenanigans (Image 2)

Oh, and uses Socket3.lua for stuff, I've uploaded that to VirusTotal and Triage. Was not seen on VT before: f2e4088ebf9d98bcc7cccff153a26a786927ae8de570889af160e695b35d1624

Читать полностью…

vx-underground

Starting March, 2026, Discord will require a facial scan or copy of your government issued ID to use 'adult features' on Discord such as participating in stages or viewing Discords and/or channels marked as 18+

Читать полностью…

vx-underground

holy shit this guy is a genius

Читать полностью…

vx-underground

> "hey smelly i ran this game, is it malware?"
> doubt_it.png
> bored
> look inside
> game
> look inside
> electron app
> look inside
> weird .png embedded inside
> look inside
> electron app inside png
> wtf
> look inside
> .zip inside png inside of electron app
> wtf
> look inside
> electron app
> ???
> .js inside .zip inside .png inside .asar inside .exe
> look inside
> heavily obfuscated

Читать полностью…

vx-underground

> Find malware campaign
> Check VT
> (Looks) New
> Currently undetected
> Look inside
> Obfuscated Lua

Seriously? Lua? You guys are a bunch of sick fucks

Читать полностью…

vx-underground

I'm really sick (STILL), don't have mental capacity to shit talk Microsoft, or talk about some weird malware shit, or describe the latest Epstein computer-related gossip and news.

I'm going to steal memes from /g/ Tech Meme's and crawl back into bed.

Читать полностью…

vx-underground

Dawg, who the FUCK setup these vx-underground posters in London? This isn't something you can just do in a few minutes. This requires planning and visiting a print shop and stuff.

There is no venue listed, the artists aren't real.

WHO ARE YOU PEOPLE

Читать полностью…

vx-underground

I wasn't sure if I was on an FBI watchlist. Getting that autograph from Mikhail Matveev from FBI Most Wanted was definitely pushing it, but an e-mail from a compromised Epstein e-mail address is the cherry on top.

Pic related (FBI watching me)

Читать полностью…

vx-underground

> see post online
> us military offensive cyber warfare division
> click profile
> they follow me
> wtf?
> theyre following me?
> is the us military using my website to study malware?
> *follow back*

Читать полностью…

vx-underground

In retrospect, the first three months of my son's life was like the dark ages. All I did was watch anime in complete silence, praying to any God that would answer my prayers, that my wife and I could sleep for just a few hours.

Nonstop anime for 90 days, per the recommendation of my peers and colleagues, was bad. I haven't watched anime ever since. I feel like I was trapped in some kind of CIA MK Ultra experiment. My brain is fried. I have this urge to move to a remote cabin and ... enjoy nature.

Читать полностью…

vx-underground

Got fixed fast af boi

https://x.com/chen9918b/status/2018726412317085953

Читать полностью…

vx-underground

Dear Tiny People Living Inside My Computer,

As many of you probably recall, somewhere between 2021 and 2023, it was critical "monkey bonk" was utilized to deter bad actors.

Times have changed. We no longer live in peace. The monkey bonk is back.

Читать полностью…

vx-underground

B-B-B-B-B---BUT VX-UNDERGROUND, DISCORD HAD A COMPROMI---- IT WAS HAACK----

And you're all still using the platform and continue paying $9.99/month for Nitro (you need to boost your favorite video game streamers server, you get extra perks, they might acknowledge your existence).

I idle in tons of Discord's that nerds invite me into. I see you dorks with your flashy backgrounds and goofy ass names with all the different colors and shit.

No, it doesn't make you look cool or 1337. We know you whipped out ol' faithful (your Credit Card) and dropped $19.99 on the flash animation, $8.99 for the pop-ups, and an additional $14.99 for that cool Overwatch sticker.

We all know you're not going to use TeamSpeak, or Matrix, or Telegram, or whatever else. You're going to say "ooga booga this bad", but then do it anyway.

Читать полностью…

vx-underground

Discord is only popular because it's convenient.

It's shrimple to use, shrimple to install, and requires almost no critical thought to configure.

The masses do not care about security, or privacy, or whatever. They want easy.

tl;dr discord normiemogged teamoids

Читать полностью…

vx-underground

This all lines up with what SmartLoader did in August.

tl;dr haven't changed shit

https://asec.ahnlab.com/en/89551/

Читать полностью…

vx-underground

More information: https://www.theverge.com/tech/875309/discord-age-verification-global-roll-out

Читать полностью…

vx-underground

"when i ran it smelly, windows deleted the malicious jar file"

THE MALICIOUS JAR FILE?! WHERE THE FUCK IS THE JAR FILE

> jar inside .js inside .zip inside .png inside .asar inside .exe

Читать полностью…

vx-underground

What the actual fuck is your problem? Why do you people keep finding weird ass obfuscated Electron.JS malware?

Читать полностью…

vx-underground

I'm still sick. I've basically got dysentery from this Influenza Type A. I'm not sure what's worse, pissing out my ass or working with obfuscated Lua. Right now I'm thinking I'd prefer pissing out my ass

Читать полностью…

vx-underground

WHO IS PUTTING UP THESE POSTERS IN LONDON

Is this some kind of esoteric Britbong humor us Ameriburgers aren't familiar with?

Читать полностью…

vx-underground

I'm being told this is a real thing.

I don't know what's real and what isn't, but August 6th is also DEFCON.

I have no idea, dawg. I give up.

Читать полностью…

vx-underground

Nerds on KiwiFarms made an absolutely disgusting discovery.

Some of the videos in the Epstein files are completely unredacted.

To spare you the details, one particularly horrific video is a 15 year old girl in her underwear. She explicitly tells the camera man her age, name, country of origin, and body measurements.

KiwiFarms currently has a COLOSSAL thread going, over 350 pages and counting, of people collectively reviewing files and sharing information.

Читать полностью…

vx-underground

> be me
> log into email
> email from jeffrey epstein
> actual email from epstein documents
> lolwtf
> look inside
> silly picture of kitty cats

Thank you to whoever logged into Epstein's e-mail and thought to send me these cat pictures. It makes me very happy.

Читать полностью…
Subscribe to a channel