This is satire

We've updated the vx-underground APT collection.

2013.03.20/The Teamspy Story
2013.03.20/Teamspy - Technical Report
2016.03.02/New self‑protecting USB trojan able to avoid detection
2019.04.10/Gaza Cybergang Group1, operation SneakyPastes
2017.04.13/Teamspy - A deeper look into malware abusing TeamViewer
2017.04.14/PlexingEagle: A surprise encounter with a Telco APT
2019.11.05/DarkUniverse – the mysterious APT framework #27
2022.04.06/Continued Targeting of Indian Power Grid Assets by Chinese State-Sponsored Activity Group
2022.09.15/F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech
2022.09.30/Amazon‑themed campaigns of Lazarus in the Netherlands and Belgium
2022.10.11/The Russian SpyAgent (Teamspy) – a Decade Later and RAT Tools Remain at Risk
2022.10.12/WIP19 Espionage | New Chinese APT Targets IT Service Providers and Telcos With Signed Malware
2022.10.12/Winnti APT group docks in Sri Lanka for new campaign
2022.10.13/Budworm: Espionage Group Returns to Targeting U.S. Organizations
2022.10.13/Alchimist: A new attack framework in Chinese for Mac, Linux and Windows
2022.10.14/New “Prestige” ransomware impacts organizations in Ukraine and Poland
2022.10.17/DiceyF deploys GamePlayerFramework in online casino development studio
2022.10.18/Unknown Actor: Powershell Backdoor disguising itself as part of a Windows update process
2022.10.18/Spyder Loader: Malware Seen in Recent Campaign Targeting Organizations in Hong Kong (Winnti)
2022.10.20/Domestic Kitten campaign spying on Iranian citizens with new FurBall malware
2022.10.21/WarHawk: the New Backdoor in the Arsenal of the SideWinder APT Group

Check it out here: https://vx-underground.org/malware.html

Individuals from the Commonwealth of Independent States make up approximately 35% of our web traffic.

We have begun aggregating Russian papers from forums such as XSS, or from individuals who have translated papers for vx-underground.

Check it out here: https://www.vx-underground.org/russian.html

RJ Young, a company which provides managed IT solutions and "smart" security devices for businesses and schools, is being extorted by ALPHV ransomware group. ALPHV claims to possess 4TB of their data.

This is yet another example of ransomware groups targeting schools.

vx-underground Telegram chatroom link: https://t.iss.one/+njfLzUrqos01ZWNh

Behave and be polite.

Have a nice day.

One week from today, we will be releasing the first edition of our own publication. Black Mass is a release of original work from our members doing research. We hope you enjoy it.

We've updated the vx-underground Malware Analysis collection. We've added 45 new malware analysis papers from the month of October.

We hope everyone is enjoying their Monday. Have a nice day.

Check it out here: https://www.vx-underground.org/malware_defense.html#malware_analysis

HIVE ransomware group has ransomed Tata Power, a multi-billion dollar electric utility company based in Mumbai, India.

Tata's confirmed the breach. Customers and sensitive data are effected, but core functionality is present and customers still have electricity.

Today the United States Department of Justice (DoJ) released documents regarding Mark Sokolovsky, 26, a Ukrainian national, for his alleged role in an international cybercrime operation known as 'Raccoon Infostealer'.

More information can be read here: https://www.justice.gov/usao-wdtx/pr/newly-unsealed-indictment-charges-ukrainian-national-international-cybercrime-operation

We've made some cool additions to vx-underground

The Windows Malware paper collection now contains the Microsoft Windows Internals Video Series. This is a series of videos produced by Microsoft explaining various components of Windows!

Check it out here: https://www.vx-underground.org/windows.html#windows_internals_video_series

> crowdsource $2,000 annual XSS scraping fee
> aggregate XSS content into vx-underground
> make free and available to the public
> anger every Threat Intel company on the planet

Meanwhile, XSS staff and forum members reading this message

The New York Post has reported today they've been breached.

https://twitter.com/nypost/status/1585629621521100801