40629
The largest collection of malware source, samples, and papers on the internet. Password: infected https://vx-underground.org/
Black Mass Volume I can be read here: https://samples.vx-underground.org/root/Papers/Other/VXUG%20Zines/2022-11-13%20-%20Black%20Mass%20Halloween%202022.pdf
Black Mass Volume II can be read here: https://samples.vx-underground.org/root/Papers/Other/VXUG%20Zines/2023-09-19%20-%20Black%20Mass%20Volume%20II.pdf
vx-underground is a dangerous website. When visiting the website it is advised you wear a full hazmat suit. If that is not an option, a construction hard hat will suffice.
Thanks,
We listened to over 500 recordings. Highlights include:
- Employee calls in sick on their first day on the job
- Someone got the job! (Congrats Ms. Sneed)
- Old people who are extremely confused and refer to cell phones as 'towers'.
- People who are not sure if they're even talking to T-Mobile (???)
- A woman telling the store her Dad's house burned down (and laughs about it?)
- A guy who did not get the job and asks why very, very, very aggressively
When the security analysts and network administrators detect unusual activity on the network
Читать полностью…
Poopy pants ransomware group (PP for short)
Читать полностью…
Hello, prepare yourself for another long post about the new T-Mobile breach and a mistake that we made.
Mistake: Employee PII was leaked, NOT customer PII. This is the 2nd time a T-Mobile breach has exposed T-Mobile employees.
We've had a large number of people asking how we knew about the T-Mobile breach and, is is tradition, we knew because the people responsible for it (leaking) notified us. However, it is already being discussed on forums.Unlike previous times we're given information prior to it's "official" media announcement, we can do more than "trust me, bro".
The breach was performed by an individual named "Doubl". The information was leaked by an individual named "Emo".
Oh, and hi Emo :)
The T-Mobile breached occurred in April, 2023. Data from the breach was not shared until September 21, 2023 (today, as of this writing). This breach occurred shortly after the 2nd breach of this year, which occurred in March, 2023. We do not know why it took the Threat Actor(s) several months to leak the data, we can only speculate, so we will not =D
The leak was shared on the infamous BreachForum, information from the database is publicly available and is already being disseminated throughout Telegram and Discord.
The information from the leak is very large and we would not be able to sufficiently detail everything leaked in text because it is multiple databases. See attached image for a list of all data leaked.
Image 1. Data from the leak. It is censored to protect employees.
Image 2. List of database rows leaked
T-Mobile either needs to completely redo their security stack or just go completely open source with customer PII.
We have never seen a company get hacked so many times. It's unreal.
Very cool, thanks for the shirt SpecterOps =D
Читать полностью…
#1 and #2 for viruses and #1 for computer hacking.
Thank you so much, everyone. These books, even if they look small, take so much time and effort to produce ourselves. We self-edit, self-publish, self-review, the entire process is done by ourselves.
Thank you so much 😭
Sometimes you nerds make it extremely difficult to do even basic things.
Per the request of Mikhail Matveev, an individual on the FBI's Most Wanted, we have begun working on merchandise titled "Arrest Wazawaka!". The clothing will feature his FBI Most Wanted poster as well as some of the ransomware groups he was associated with.
Free money for us
Free advertising for the FBI ¯\_(ツ)_/¯
Earlier today we pushed a test version of the store, and people bought it. It wasn't live very long. So, some nerds out there possess clothing never intended to be released the public.
Also, here is our version in testing. We are reviewing the shirt physically to make sure the text on the back is readable.
DO NOT BUY IT. IT IS NOT READY TO BE BOUGHT.
VX-UNDERGROUND JUST SCORED PERFECT ON OUR MITRE Engenuity ATT&CK® EVALUATIONS.
WE ARE THE BEST IN THE WORLD
- 420% PROTECTION
- 1337% DETECTION
- 9001% VISIBILITY
- 6969% TECHNIQUE COVERAGE
- ∞% REAL TIME DETECTION
- 8,446,744,073,709,551,615% OUT OF THE BOX
Our friends at MalcoreIO are giving away 20 copies of Black Mass Volume II and some accounts on their platform for free on Twitter. If you'd like a chance to win, check out their Twitter stuff here:
https://twitter.com/Malcoreio/status/1704519834938028079
Black Mass Volume II doubles as a coloring book.
It is meant to symbolize our many typos, mistakes, failures, and it pays homage to our first Black Mass release which was botched by our publisher.
It is a gag, but we hope it is something you enjoy.
Hello, how are you?
After almost 1 year of work our second zine is complete. We are happy to announce the release of Black Mass Volume II.
The PDF is free. Physical copies will be available worldwide for purchase in the next 24 - 72 hours.
Free PDF: https://samples.vx-underground.org/root/Papers/Other/VXUG%20Zines/2023-09-19%20-%20Black%20Mass%20Volume%20II.pdf
Hello,
We've had a few people reach out to us regarding to Black Mass Volume I & II. Yes, the PDFs are intentionally left publicly available on the website. The e-book is free, the physical copies are available on Amazon.
Nobody leaked them on Discord.
Have a nice weekend:)
We're almost done with migration.
Thank god. Seriously. It took 2 christmas miracles to get this thing where it is now
The T-Mobile ConnectivitySource retailer breach contains 146,109 audio recordings of customers calling stores. The retailer is present in 38 states.
Читать полностью…
Today BleepinComputer reached out to T-Mobile regarding the allegations of them being compromised.
T-Mobile informed them that it was NOT T-Mobile corporate that was compromised, rather it was a T-Mobile franchise. This breach was disclosed in court May 10th, 2023. The data was not leaked until yesterday.
Luckily, this only impacted 17,835 past and current employees
https://www.jdsupra.com/legalnews/amtel-llc-dba-connectivity-source-3147197/
It's the year 2050, Neurolink is a mainstream success.
Nerds use Flipper Zero to make you poop your pants while sleeping
This man did 1 pushup every time T-Mobile was Breached. Look at him now!
Читать полностью…
T-Mobile has been breached (again). Data has been exfiltrated and it is being shared online (again).
This is T-Mobile's 8th breach since 2018.
This is the 3rd breach this year.
This breach is 90GB of exfiltrated customer PII.
Nerds have been given their Mullvad VPN subscriptions.
September 27th Malcoreio will be giving away 20 copies of Black Mass Vol. 2 (see their Twitter for details, its pinned).
We will also be giving away some free swag soon too! Maybe more books =D
The Mullvad VPNs for the giveaway have arrived =D
We will be sending them to the winners shortly. Thank you everyone for the love and support.
Hello,
No one in vx-underground is named Dmitry.
Thanks,
TransUnion put out a statement regarding the Threat Actor "USDoD" & allegations of TransUnion being breached. TransUnion states that the leaked data does not match their internal format and believe the compromise to be from a third-party
Info via AlvieriD
Black Mass Volume II is now available for purchase on Amazon for $13.37. It is available for purchase worldwide.
We will be giving away 60 physical copies for free later this week =D
https://www.amazon.com/dp/B0CJBP84D4/
We'd also like to take a moment to thank our sponsors for the support: MDSecLabs, MalDevAcademy, shellterproject, GuidedHacking, Malcoreio, and Zetalytics.
We'd also like to thank our monthly supporters who make this all possible.
We're not really a religious bunch of nerds, but we'd like to take a moment and pray for Microsoft.
- July, 2023: Microsoft is compromised by Threat Group "Storm-0324", also sometimes referred to as "TA543". The Threat Group stole signing keys which they abused to forge authentication tokens - granting them access to inboxes of individuals working for the United States government. Microsoft believes this threat group to be of Chinese origin.
- September, 2023: Nicknamed, "Bloody Tokens", Microsoft misconfigured an azure storage bucket exposing over 30,000 internal Microsoft Teams messages and 38TB of private AI research data
- September 2023: Microsoft v FTC court case accidentally leaks highly confidential and unredacted data. A court case file was accidentally marked as public. The court case file unveiled Microsoft's plans for Elder Scrolls: Oblivion remaster, Doom Year Zero, Fallout 3 remastered, Dishonored 3, an Indiana Jones game, Project Kestrel, Project Platinum, their new New Gen console scheduled for 2028, new Xbox controller schematics named "Sebile", and more...
Attached images are from the Microsoft v FTC court case leak.