We caught up on most of our work.

But, 2 staff members are sick and the others responsible for additions are getting ass blasted by their employer.

Computer jobs are dumb

Palo Alto Unit42 is currently seeking an intern. We agreed to share that on the condition money was given for pizza. Unironically, money was indeed sent for pizza.

Anyway, here's the intern stuff if you're interested

https://app.ripplematch.com/v2/public/job/791cfa0c/details

Today we spoke with individuals from the US Eastern District Court of Virginia. We requested information from the Clerks office on the official sentencing of Mr. Conor Fitzpatrick, the previous administrator of BreachedForum.

He was sentenced to 20 years supervised release

He will not be going to prison. That is a profoundly kind sentence from the Honorable Judge Brinkema.

More details will be present on PACER on Monday, or Tuesday, when the Court Deputy enters the information into their system

We've updated the vx-underground MacOS VX paper collection.

This is a pretty rare update, due partially to scarcity of resources, partially to our ignorance.

Have a nice day.

https://vx-underground.org/Papers/Other/MacOS%20VX

IoT botnet

A while back, we had one of our backend devs work on the frontend. This is as far as they got

Update: used it to buy Qdoba. Ate like royalty

We're in the process of uploading an additional 20,000 new malware samples to vx-underground and the VXDB.

Thank you to our friends at virussign for giving us the hook up 🙏

We've had many people ask us how we become acquainted with cyber criminals. The answer is very simple. We approach them and use their own slang to initiate a conversation.

See attached video for a demonstration.

Lockbit ransomware group has posted Subway to their website.

This is sad. They have some good sandwiches

The fastest way to learn in any computer related subject is to go to a chatroom on the topic (preferably an IRC chat) and say something blatantly wrong.

You'll receive essentially a free course on the subject as long as you keep saying wrong things

Valentines day is approaching very quickly.

Gift your significant other something special this year. Grab an old motherboard, cover it in melted chocolate, and present it on a nice plate.

They'll love you forever

We interviewed a Sim Swapper today.

We are super excited that we have another sponsor. Our friends over at HudsonRock are now an official sponsor of vx-underground 🙏

They collect absurd quantities of data stealers logs, helping companies protect themselves from you degenerates

Thank you, Hudson Rock

Today CourtWatch discovered that the United States has officially charged Chouby Charleron a/k/a/ "The Real Jewt King" of running a 'TLO' service.

TLOxp is a service offered for debt collectors, employers, and law enforcement officers to perform background checks on individuals.

Chouby Charleron is alleged to have operated a TLO service from 2020 to 2023. Interestingly, Chouby Charleron charges did not originate from the FBI. It originated from the United States Postal Service (USPS) - more specifically a Postal Inspector part of the United States Postal Inspector Service (USPIS).

Authorities allege Chouby Charleron service resulted in doxxing campaigns, and social engineering campaigns used for fraud or extortion.

He is currently being charged for Conspiracy to Commit Wire Fraud which is punishable to a max of 20 years in prison and/or a $250,000 fine.

January 16th an individual operating under the alias 'Emo' posted over 15,000,000 unique entries from Trello online.

According to HaveIBeenPwned it is believed the individual programmatically scraped the site using previously disclosed e-mails to aggregate data on individuals.

We continue to see a significant rise in cryptodrainers, especially DaaS (Drainer as a Service), and the now competing DaaS groups such as Angel Drainer and Lethal Drainer.

These groups are bringing in big money and are beginning to blood into the malware-space

We've updated the vx-underground Windows malware paper collection

- 2024-01-23 - Windows Event Log service DoS
- 2024-01-06 - A little known secret of fondue dot exe
- 2023-12-27 - A little known secret of regsvr32exe
- 2023-12-26 - A little known secret of runonceexe

🫡🫡🫡

We've received a few notifications today regarding the "Mother of all Breaches" - which allegedly contains 26,000,000,000 creds and information from people all across the globe

This is simply a compilation of breaches and scrapes rolled into 1. It isn't anything new or crazy

¯\_(ツ)_/¯