Good morning,

Yes, we have heard the news about the owner of Doxbin allegedly being kidnapped and beaten. Yes, we have also received messages saying its a paid actor and an attempt to 'detrace' himself.

Thank you to everyone who notified us.

Love you ♥️

Note: we don't know what's the truth and what isn't. It's Wednesday, my dudes

Last post of the morning. We've got work to do.

tl;dr nerds enumerated the merch site trying to pre-buy the 5 year anniversary shirt. Some of you found it. If you try to buy it and it's botched that's on you. You can tell it's in the preview phase because BradleyVX wrote it's delivered by horse.

Why would you want to pre-buy an item that may not even be working? It says its delivered by a horse like it's the 1700's

You're all degenerates and we love you for it.

BreachForum has been seized again.

The current display page states the forum is now in control of the United States Federal Bureau of Investigation and is being reviewed.

It also displays a photo of the current administrators Telegram profile pictures, but behind bars.

The Breach telegram is now under control of the United States Federal Bureau of Investigation

Waiting for the Department of Justice to issue a statement regarding the Breached takedown

Today has been a whirling wind of chaos.

tl;dr we don't know anything. We need solid proof.

First, earlier this morning the current owner of Doxbin, Operator, was allegedly beaten and kidnapped. Footage released by the would-be kidnappers shows, presumably Operator, tied to a pole and being punched and kicked. However, many viewers immediately expressed doubt on the footage and some said it's a 'detrace' operation — essentially an exit strategy for Operator.

We do not know the truth. We can only speculate. It is strange.

Secondly, BreachForum was seized today. Following the takedown there were lots of rumors floating around about Breach being a honey-pot, that key members have been arrested, etc. While this may certainly be true, there is no confirmation from law enforcement agencies on arrests or indictments. ShinyHunter, the other administrator of the website, has stated the other administrator, Baphomet, has been arrested. While we don't doubt this (ShinyHunter of all people would probably know), we would like an official Department of Justice announcement or court document confirming these statements.

What we can say though is that although Breach is gone, we are certain another forum will appear (eventually) to fill the power vacuum. It's only a matter of time.

Anyway, looking forward to Breach and/or Raid rebrand number 4!

User vxdb on Twitter is not associated with vx-underground. They just by chance have the letters "vx" in their name.

We have no affiliation with them.

Please stop asking us about their posts because we have no idea.

But, it is a cool Twitter handle though

This year we will be working with nerds from DEFCON to ensure the complete vx-underground collection is available at DEFCON in the data duplication village

Bring a 8TB+ drive to DEFCON if you want a copy of the data.

No, we won't be at DEFCON. Core staff members are malware monks that don't go outside.

Sunday is our 5 year anniversary. We we be celebrating 5 years of disorganization, typos, accidental misinformation, and being labeled criminals over 9000 times.

Sunday we will be giving away 30+- vx-underground 5 year anniversary shirts. It will be $1,000 worth of merch all sponsored by our friends at TorGuard.

Additionally, we will be giving away 1 vx-underground harddrive, this drive contains everything on the vx-underground site — roughly 13TB of malware material (although it is compressed to just over 5TB). It is password protected. If you ask for the password you WILL be monkey bonked. This drive is possible due to an individual not correctly reading emails and people banding together to make sure we don't lose any money. In summary, this giveaway is sponsored by YOU :)))

If you're not interested in participating in the giveaway you can also buy the shirt. It will be available on our merch store starting this weekend too. It will ship everywhere except North Korea, Russia, and whatever else is sanctioned by the United States government.

If you're in Russia and want to buy a shirt, have your friends in the UAE buy a shirt and have them send it to you.

If you're in North Korea and want to buy a shirt, please just try to escape the country instead.

Thank you everyone for the love and support over the past 5 years. We are looking forward to Sunday. It's going to be an exciting day.

Love you 😘

We will be celebrating*, right off the rip we fuck it up.

You cringe you lose

We've updated the vx-underground malware families collection

- StealC
- RisePro
- RaspberryRobin
- Android.Vultur
- QuasarRAT
- DarkGateLoader
- DinodasRAT
- NokoyawaRansomware
- Latrodectus
- IcedId
- InstatWiper
- Gafgyt
- CobaltStrike
- Glupteba
- DoNexRansomware
- AsyncRAT

We're giving away free stuff on Twitter because we turn 5 tomorrow. Go over to Twitter if you want to try to win free stuff.

https://x.com/vxunderground/status/1791819677460496465

Dear DEFCON DDV nerds,

Please contact us.

Thanks,

(Initially we said we'd send the data to them, but being of extremely high IQ, we didn't realize uploading remotely from a local copy would take way too long.)

Ali Diamond, the lady from Hak5, bought a vx-underground harddrive... and then got photos taken as if it were a baby? She paid for a professional photoshoot and named it Diva

https://www.youtube.com/watch?v=NIpOeHFYZrM