We have collected 73 malware-related papers from XSS.

* All papers in Russian
* Link to paper present for credit to original author

Check it out here: https://www.vx-underground.org/russian.html#xss-%D0%BA%D0%BE%D0%BB%D0%BB%D0%B5%D0%BA%D1%86%D0%B8%D1%8F

Earlier today Instagram pushed bad code to prod. Thousands of users accounts are inaccurately stating their account is suspended.

From our headquarters underneath the Vatican, happy Halloween!

Today we release the first edition of our new publication Black Mass.

Special thanks to our Editor in Chief @h313n_0f_t0r for all of her hard work.

https://papers.vx-underground.org/papers/Other/VXUG%20Zines/Black%20Mass%20Halloween%202022.pdf

Mark Sokolovsky, a Ukrainian and the alleged author of Raccoon Stealer, was arrested in the Netherlands in March, 2022 with the accidental help of his girlfriend

They fled Ukraine together. She documented everything on Instagram

She posted this photo 2 days prior to his arrest

tl;dr if you're an internationally wanted cyber criminal, avoiding a mandatory draft, and illegally immigrating into NATO territory, do not document everything on social media.

100% of malware on Windows contains code. We could solve the malware problem tonight if Microsoft simply removed code from Windows

Speaking of malware, we updated the vx-underground Bulk Malware download collection. It's 12,788 malicious binaries.

Download them all and do the brain science

Check it out here: https://www.vx-underground.org/malware.html

P.S. Previous post of "hahaha" was me accidentally sending 11,584 people a meme. I'm sorry smart

- smelly

We will be releasing our next zine December 25, 2022.

We are issuing a call for papers.

* Deadline December 1st, 2022
* Must be related to malware development

Have a nice day.

vx-underground statistics October, 2022

- Tweet impressions: 16.7M
- New Twitter Followers: 9,269
- Total data served: 33TB
- Total web requests: 33.6M
- Telegram followers: 11,603

Vitali Krimez has passed away.

Our deepest condolences to Vitali Kremez family, friends, and colleagues. You will be missed.

https://twitter.com/USCGSoutheast/status/1587837506384543757

Lockbit ransomware group states they want to purchase the source code to Raccoon Stealer. This marks the 2nd time Lockbit has publicly noted their acquisition of other malware campaigns and/or competitors

* Intel & photo via ddd1ms

It has been reported over 50% of Twitter staff have been laid off following the acquisition of Twitter by Elawn Moosk

Exclusive footage of Twitter HQ November 4th, 2022

Video games are a gateway drug to hacking, reverse engineering, and malware development

We've updated the vx-underground Windows malware paper collection

- IIS Pool Credential Dumping via undocumented command line arguments
- DLL Sideloading ShellChromeAPI
- 30 second execution persistence with Winlogon

The VX-API is now on version 2.0.354

Our malware development framework now contains elementary networking functionality for ICMP echo requests and IP address string manipulation. We've also enhanced the malicious capabilities section 😎

EDIT:
version 2.0.364***

vx-underground is the worlds largest contributor to typographical errors.

Have a nice day
https://github.com/vxunderground/VX-API

We have consumed every publicly shared malware sample on the internet.

- All Virusshare samples
- All MalwareBazaar samples
- All VxHeaven samples
- All theZoo samples
+ 1,825,000 other public and private samples

EDIT:

+ every publicly released APT paper with accompanied APT samples (if samples were shared on VirusTotal) dating back to 2008

Approx. 37,000,000 samples+- 4TB compressed

We are 55 days away from 2023. Here is the objective's for the remaining weeks:

- Complete ingestion of malshare into VXUG MWDB
- Complete malware paper aggregation from XSS forum
- Begin malware paper aggregation from Exploit forum
- Release Vx-mas 🎅

>Open Call of Duty Modern Warfare 2
>Go to Private Match
>Create Private Match
>Go to Call of Duty League
>Select CDL Control
>Let it unlock, don't start the match
>Immediately unlock all Operators, Calling Cards, and Emblems, including content scheduled to be released
>???

tl;dr don't need to worry about anti-cheat engines when gaming studios don't hire quality assurance teams

The United States Department of Justice has announced the arrest & conviction of James Zhong. Zhong defrauded online marketplace Silk Road of 50,676.17 Bitcoin in 2012. The current value of Bitcoin places this value at approx. $1,049,989,971.

More info:
https://www.justice.gov/usao-sdny/pr/us-attorney-announces-historic-336-billion-cryptocurrency-seizure-and-conviction

We are seeking submissions for the December edition of Black Mass. If you are interested in contributing something, please fill out the CFP form below. Submissions should be new content & not published beforehand. The deadline is Dec 1, 2022. Thank you.
https://forms.gle/UaHVpY3PzK4F43fRA

Ransomware Operator, a Bug Pokemon, these pokemon are typically found on Domain Controllers and are most active on American holidays, weekends, or night-shifts