Oh, and per request we will accept BTC and ETH for harddrive purchases 🫡

Health tip of the day

Some important updates for vx-underground for the remainder of 2023:

- More giveaways of educational content coming. Unfortunately, we are relatively busy and we are having a difficult time giving away so much material so fast. Be patient! We have 4 more remaining! This totals roughly $55,000 in educational content given away for free to you beautiful bastards.

- Harddrive pre-orders are being cloned. New purchases will begin cloning in January, 2024

- Updates to vx-underground content will be slow, if even at all, for the remainder of 2023 as we enjoy the holiday season and vacation time 😎

Important updates to vx-underground in 2024:

- Improve site search functionality
- Improve site scrapability for degenerates
- Give away educational content once per month
- December, 2024 will be giveaways all month (again)
- Black Mass Vol 3 will be released
- Black Mass Vol 4 ¯\_(ツ)_/¯
- Allow API querying and downloading in VXDB
- Add 'recent additions' feed to website
- Reactivate Twitter ransomware bot
- New merchandise? ¯\_(ツ)_/¯

Thank you for everyone who sponsors, donates, purchases things from us, and interacts with our posts. All of these things allow growth which brings in revenue. This increases the sites performance and materials without charging money to people and without us worshipping corporate overlords.

We look forward to serving all of you in 2024.

I love you

We are once again doing another giveaway on Twitter - we are approaching the end of our giveaways

https://twitter.com/vxunderground/status/1736646877385248934

vx-underground talking with vendors and CERTs trying to get free stuff

When we asked a vendor for free stuff and they asked us what our 4th quarter social media strategy is

(we don't have strategies)

POV: Cybersecurity companies seeing a small to medium sized business being hit by ransomware after declining to pay $150,000/month for their product

Comcast has reported a security breach impacting 35,879,455 Xfinity customers. It is reported the breach was discovered December 6th, 2023 with a suspected initial breach date of mid-October, 2023.

Information via BrettCallow

ALPHV ransomware groups website has been seized

Information via AlvieriD

Previously ALPHV ransomware group reported to us that their website was offline due to hardware failure. This has happened to them in the past, so the excuse was plausible. However, as you can see from the image above, it was not hardware failure.

ALPHV ransomware group administrative group has contacted us to inform us they have moved their servers and blogs.

*Image translated from Russian to English

Today the United States government released an official statement regarding ALPHV ransomware group.

They unveiled they have a decryption tool for ALPHV and, with cooperation with international partners, decrypted over 500 companies

More information: https://www.justice.gov/opa/pr/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant

The FBI ALPHV search warrant states that a confidential informant got access to the ALPHV panel.

Then the FBI did an ... 'investigation' on the ALPHV panel, managed to get visibility into the ALPHV network, got 946 private/public keys and access to other affiliate panels (???)

tl;dr summary of United States government (and associated entities) vs ALPHV ransomware group

December 10th, 2023: ALPHV primary domain goes offline, administration saying it is hardware failure

December 10th, 2023: Rumors circulate that is it LE taking down ALPHV

December 11th, 2023: ALPHV denies allegations

December 19th, 2023, 7:26AM EST: ALPHV domain seized

December 19th, 2023, 7:42AM EST: ALPHV states this is the old domain and it doesn't matter

December 19th, 2023, 9:56AM EST, United States Department of Justice releases official statement on the seizure of ALPHV as well as compromising of their servers

December 19th, 2023: 12:34PM EST, ALPHV unseizes domain and threatens retaliation against United States (and associated entities) by allowing attacks against critical infrastructure

Updated United States government vs ALPHV ransomware group

The FBI has re-seized ALPHV's old website, ALPHV would then take it back. It has been seized and then 'unseized' roughly 4 times today.

Lockbit ransomware group is now trying to poach ALPHV developers and affiliates

We're doing (another) giveaway on Twitter

https://twitter.com/vxunderground/status/1737281915890118719