vxunderground | Unsorted

Telegram-канал vxunderground - vx-underground

40629

The largest collection of malware source, samples, and papers on the internet. Password: infected https://vx-underground.org/

Subscribe to a channel

vx-underground

Looks like Christmas came early this year boys.

We got ourselves a Threat Actor distributing malware masquerading as a reverse engineering tool, trying to compromise security researchers.

Thanks for the goop, ya doofus

Читать полностью…

vx-underground

Omfg bro, I just accidentally invented the modern banking system.

They even stole my idea of "table". Banks are called banks because it used to be "bench" because they would talk business while sitting on a bench at the local marketplace

Omg bro people always steal my ideas

Читать полностью…

vx-underground

I don't know why my shaver needs my first name, last name, email address, telephone number, an app installed, bluetooth enabled, location sharing enabled, and local network device finding enabled ... to trim my beard

Читать полностью…

vx-underground

Apple devices now give you alerts if you're cool and badass

Читать полностью…

vx-underground

I checked my DMs today.

I was thanked for the vx-underground drives at the DEFCON Data Duplication Village

I was not aware vx-underground copies would be at the DEFCON Data Duplication Village

I was asked about the vx-underground party at DEFCON

I was not aware vx-underground had a party at DEFCON

Читать полностью…

vx-underground

tl;dr Trump administration said "ransomware, fraud, cybercrime is for nerds and the nerds pissing me off bigly fr"

Then he said, "fuck it, hit is up, if you're cool we'll let you perform hack backs, it's not even a big deal anymore, whatever fuck it bro, do your thing"

Читать полностью…

vx-underground

But seriously, I promise you your peers and colleagues know you're making slop and you should feel fucking embarrassed. Like, it physically hurts me to see these people produce slop and think it's actually impressing anyone other than other slop makers

Okay, love you lots, mwah

Читать полностью…

vx-underground

me when ive never done any sort of hacking ever in my life so i need to do it as obnoxiously as possible and also my brain has been replaced by a can of peas

Читать полностью…

vx-underground

Nah, but bro said, "vx-underground is an educational website about malware; everything they use or test is done for ethical purposes. It is important to get informed before looking for someone to blame."

tinchoocabrera is the homie wtf i love him

Читать полностью…

vx-underground

Maybe someone will pick it up and I can have it published at a fancy place like Barnes and Noble, then I can be called cool and badass and people can make fun of me

Читать полностью…

vx-underground

Had a dream last night about malware

Outside doing family stuff, daydreaming of my malware idea. Super excited to sit down on computer and bonk malware.

God I love malware so much

Читать полностью…

vx-underground

"Bro look! That cybersecurity company is using CAT MEMES as advertisements! Isn't that awesome?"

Читать полностью…

vx-underground

these nerds put in a significant amount of effort to make this as multi-staged and as convoluted as possible. this is 100% AI generated. they left the notes in place. however, based on everything i'm seeing, i think this person probably has a decent understanding of malware and understands how annoying this is

tl;dr not super sophisticated malware, but really fucking annoying

Читать полностью…

vx-underground

> be me
> get email
> "smelly, is this malware?"
> look inside
> 23,000 line VBS file

Читать полностью…

vx-underground

Lots of stuff happening with vx-underground at DEFCON

It's all very confusing though because I don't go to conferences, and many of the vx-underground things occurring I was not informed of, or made aware of, or I literally don't even know what it is

So it's just kind of weird when I'm chilling and I'm notified like, VXUNDERGROUND THING HAPPENING AT DEFCON and I just stare at my screen like ?????

Then people message me if I'm at DEFCON and I'm like "nah" and then they're like "omg thank you so much for the goop" and they send me a picture of something I've never seen before, or a picture of someone I've never met in my entire life

I don't care, I just do malware stuff and collect pictures of cats, but it's all very confusing and it hurts my little brain because I don't go outside but apparently I (or my crappy project) is doing many things that I myself didn't know existed

Anyway, yeah I have no idea what's going on, I'm not there, I'm sniffing around the internet looking for goop

Читать полностью…

vx-underground

Anthropic CEO wife hung out with Epstein and ... PITCHED PORNOGRAPHY BUSINESS IDEAS TO HIM

Читать полностью…

vx-underground

I keep seeing terrible news about crypto theft, kidnapping, hacks, etc.

I've come up with a solution.

I'll build a special place where you can safety store your cryptocurrency. It will have polite people that greet you when walk in the building, some sort of vault that is fire proof, tornado proof, flood proof, etc. The place will be clean, play boring music, but it'll make you feel fancy and stuff.

You can safety deposit your crypto currencies into this build. I will establish a relationship with the local police department, install panic buttons to immediately notify them if anyone tries any funny business. I'll also implement boring rules, procedures, and protocols, to ensure employees are incapable of stealing your cryptocurrencies.

In exchange for holding your cryptocurrency I'll charge a nominal fee, monthly or annually, alternatively I will borrow against your cryptocurrency to invest into other things.

I'll call it "table", because when we talk business we'll be sitting a table.

I'm a god damn genius

Читать полностью…

vx-underground

> be me
> decide to buy new electric shaver
> go to store
> purchase
> $239.99
> ultra mega fuck off shaver 9000
> go home
> open box
> requires Bluetooth connection
> requires making an account
> requires location sharing
> collects information about shaving habits

Читать полностью…

vx-underground

Kind of weird, because I'm the only person on this social media profile now (Bradley is still gone), and I'm the only person who works on vx-underground now.

But, ... okie dokie ...

Читать полностью…

vx-underground

Then everyone clapped and said, "wow thats a totally unique idea" then they said "gng, chinas been doing this bro, on god"

Читать полностью…

vx-underground

This received nearly 2,000 likes. I will upload 2,000 malwares to prod in your honor.

Just kidding.

I'm pushing 275,000 malwares (I was prepared for 275,000 likes)

Pic unrelated

Читать полностью…

vx-underground

I'm about to crash out

You're a fucking bum if you use AI to write your research papers. If I see one more "WHY THIS MATTERS" I'm going to lose my fucking shit bro

You're a fucking bum who can't do research, you depend on a subscription model to think for you, and your bum ass can't even comprehend what happened so you need to spend more money to have it "write".

Then I see all these corny ass replies, people larping like they've read the "write-up", when anyone with a shred of self-respect, integrity, and critical-thinking skills, know it's a big stinky sloppy pile of pig shit

HOW DO YOU INTEND ON GETTING A JOB IF YOU DON'T KNOW ANYTHING?

Okay, I'm done screaming at my computer monitor. I'm going to go eat dinner, tonight we're having pizza. I am excited because I like pizza and it makes me happy.

Mwah, kissies, love you all lots

Читать полностью…

vx-underground

I sat down and did some schizo ranting for my attempt at a book I might name "Malware 4 Noobs" (no idea yet).

Here is my introduction segment, part zero (no reforms or changes made yet).

If you're noob, please read and give feedback.

https://malwaresourcecode.com/home/my-projects/write-ups/part-i-malware-4-noobs-version-0

Читать полностью…

vx-underground

Some dork on Instagram is accusing me of being behind the whole Mecca Chameleon steam malware thingie and says @IntCyberDigest labeled me the criminal, or something, I don't know.

I'm not even mad they called me a criminal, I'm mad they would accuse me of making weak malware.

I've got a family now, I'm basically a born again Christian, I drive the speed limit, wear socks with sandals, and tuck my shirt into my cargo shorts. I don't do anything even close to illegal.

However, if I was going to switch it up and become a full fledged Threat Actor, I am NOT going to do something half-baked like this Mecca Chameleon thing, I'm going to develop an information stealer, partially AI generated, written in like five different programming languages, and storing the payload on something goofy like a Billie Eilish instagram comment. Then I am going to sell it online on some place like Tier1 and deal strictly in XMR.

I am insulted you would think I would stoop so low to do something like a malicious Steam game (or hijack).

Читать полностью…

vx-underground

I've had so many people talk to me about looking for entry level material for malware, I've decided to give writing a book another try.

I'm going to call it "Malware for Noobs" and just schizo rant a bunch on my blog until I think it's enough for a book

Читать полностью…

vx-underground

> computer nerds talking about stuff
> discussing some kind of mod
> video game stuff
> people say might be malware
> scroll down

Читать полностью…

vx-underground

oh, and the files arent on VT, for my colleagues who care about weird annoying goop

initial loader:
0a12cdc7d66a5a26a52b1a8baec6816fd25d847bd26c9ffe145ef6e59fbc1a7f

.msi
99fe40b0831f75d17e16db291d15f03e48c324754f3e999f4bea69b4006b85a7

initial autoit script
0fec75b0aec43e8661130a4c271a09681e773ee93423a8d12d5f9705531443a0

secondary autoit file
8e57bbbdbccb3bf13069e02f0209a69fca2b6c3cc7d224cb94a1f342f23968b6

compressed delphi loader
4c8fdac932ee465bbcbb292c1570350284e46bd258fd961ea9c3bf69ccd65ee1

delphi loader
1b2c3e80347b35fb5811619f3aeae75f05dd4e635ffef7620141be7ed3041eb3

file6 (weird delphi thingie)
38c1d2f4888852b23c540ffdff38be2ab24cb14c4bed86ae762f532377772319

Читать полностью…

vx-underground

> be me
> get email
> "smelly, is this malware?"
> "someone sent this to our offices at work"
> "its trying to infect people at offices"
> ok cool
> get file
> download
> look inside
> 23,000 line vbs file
> lol ok
> xor encoded each individual character
> mildly annoying
> bonk bonk
> downloads file from enviamais-dot-store
> downloads "destenticador".py
> lol ok
> download
> look inside
> obfuscated python
> not very good obfuscation
> downloads .zip file
> "N3d5XpZbsd5juio".zip
> extracts .zip
> .zip contains .msi file
> lol ok
> download .zip, get .msi
> look inside
> all files inside installer stripped
> f1, f2, f3, f4, f5, f6
> lol ok
> check installer actions
> f6 is "winsqre".exe
> actually renamed autoit loader
> lol ok
> f6 (autoit) reads f4 (autoit scripts)
> look at f4
> obfuscated autoit
> takes a bunch of gunk to make another file
> chunk1, chunk2, etc
> add them together
> another autoit file
> ??? ok bro how far as we gonna go?
> look inside at new file
> autoit file scans machine for stuff
> looks stuff
> "FIBANK - Iniciar a sessão"
> "InternetBankingCAIXA"
> "GerenciadorCaixaGerenciadorFinanceiroCaixa"
> idk what this means
> if finds thingies, references other files inside msi
> ??? were looking back to the .msi installer ???
> autoit script loads f1
> RtlDecompressFragment
> o ok its a compressed .exe
> decompress file
> look inside
> DELPHI FILE
> look inside
> delphi does stuff
> delphi decrypts ANOTHER FILE and runs it
> ANOTHER DELPHI FILE

dude, what in the fuck is this shit?

.vbs -> .zip -> .msi (files 1 - 6)

.msi_file6 -> msi_file4

.msi_file4 -> autoitscript

autoitscript -> .exe

.exe -> msi_file5

Читать полностью…

vx-underground

Them: "Great meeting you at DEFCON! Thanks for the stuff!"
Then: *Sends picture of people and stuff*

Me:
- I'm not there
- I don't know who you are
- I didn't give you anything
- I don't know what you got
- I don't know the people in the photo

Me: "No problem, bro" (I don't know what's going on)

Читать полностью…

vx-underground

"What if we used AI to turn source code into a binary?"

Читать полностью…
Subscribe to a channel