We've updated the vx-underground malware families collection

- StealC
- RisePro
- RaspberryRobin
- Android.Vultur
- QuasarRAT
- DarkGateLoader
- DinodasRAT
- NokoyawaRansomware
- Latrodectus
- IcedId
- InstatWiper
- Gafgyt
- CobaltStrike
- Glupteba
- DoNexRansomware
- AsyncRAT

We're giving away free stuff on Twitter because we turn 5 tomorrow. Go over to Twitter if you want to try to win free stuff.

https://x.com/vxunderground/status/1791819677460496465

Dear DEFCON DDV nerds,

Please contact us.

Thanks,

(Initially we said we'd send the data to them, but being of extremely high IQ, we didn't realize uploading remotely from a local copy would take way too long.)

Ali Diamond, the lady from Hak5, bought a vx-underground harddrive... and then got photos taken as if it were a baby? She paid for a professional photoshoot and named it Diva

https://www.youtube.com/watch?v=NIpOeHFYZrM

Thank you to our friends in Ukraine for the lovely picture. The gang signs makes it extra cool.

We are now officially 5 years old everywhere on the planet.

Except Anchorage, Alaska but we're not staying up any longer. We're old and it's way past our bed time.

We'll start selecting winners of free stuff later today.

Cheers.

We are experiencing some technical difficulties with our giveaway. Twitter is having a difficult time loading all of the comments people left. We are only able to see approx. 300 replies out of 2,500+

If you have any suggestions please let us know.

Thanks,

Okay, we get it. We've received enough emails. We PROMISE we will enable comments this week. You can stop emailing us now.

We are still having problems with our vx-underground 5 year Twitter giveaway. We have tried a few different methods. Currently we are only able to view approx. 800+- comments.

Tomorrow our Chief Executive Nerd (DuchyRE) and his faithful side kick (Monster Energy Drink) will be assigned to the case. Additionally, we have enlisted the help of Breach forum nerds who are exceptionally skilled at scraping. If anyone get the comments, these nerds can

tl;dr Microsoft introduces 24/7 surveillance functionality for the NSA and/or CIA but markets it as a feature that you'll like

https://x.com/tsarnick/status/1792680674060832829

Last week we became acquainted with a server administrator for a 'body mutilation' site.

He assisted a group of individuals with hosting, and maintaining, a site where people were mutilating, severing, smashing, and cannibalizing male genitals. Access to videos required paying money – it was essentially a pay-per-view for watching male individuals be maimed, some were even teenage boys.

The individuals he assisted have since been arrested and sentenced to prison. He was not arrested because despite providing hosting and assistance with the site, he did not actively maim anyone.

We are hoping to interview him and get his perspective on things. No idea if he'll agree to an interview, but it's exciting.

Microsoft May 3rd, 2024: We must prioritize security above all else

Microsoft May 19th, 2024:

wElL aPpLE doES iT

Apple shouldn't do it either — but we didn't know Apple did this because we don't use Apple products and we don't focus on Apple products in the cyber security ecosystem.

No one should be doing this. We don't care if it's for AI, we don't care if it's only local, we don't care if it can be enabled or disabled.

Most consumers won't understand what the hell this is, and most consumers won't know how to turn it off.

We're also terrified of the ramifications of this in enterprise environments. It is wildly invasive, and in environments where end users don't have control over what is enabled and disabled, this is yet another potential attack vector for information stealers or ransomware.

The West has fallen. It's all over now.

Shoutout to the random person who tried to social engineer our staff into getting a free 5 year anniversary shirt. They were convinced this person was a giveaway winner and contacted other staff for verification.

B+ social engineering attempt. Almost got 'em