Last week we became acquainted with a server administrator for a 'body mutilation' site.

He assisted a group of individuals with hosting, and maintaining, a site where people were mutilating, severing, smashing, and cannibalizing male genitals. Access to videos required paying money – it was essentially a pay-per-view for watching male individuals be maimed, some were even teenage boys.

The individuals he assisted have since been arrested and sentenced to prison. He was not arrested because despite providing hosting and assistance with the site, he did not actively maim anyone.

We are hoping to interview him and get his perspective on things. No idea if he'll agree to an interview, but it's exciting.

Microsoft May 3rd, 2024: We must prioritize security above all else

Microsoft May 19th, 2024:

wElL aPpLE doES iT

Apple shouldn't do it either — but we didn't know Apple did this because we don't use Apple products and we don't focus on Apple products in the cyber security ecosystem.

No one should be doing this. We don't care if it's for AI, we don't care if it's only local, we don't care if it can be enabled or disabled.

Most consumers won't understand what the hell this is, and most consumers won't know how to turn it off.

We're also terrified of the ramifications of this in enterprise environments. It is wildly invasive, and in environments where end users don't have control over what is enabled and disabled, this is yet another potential attack vector for information stealers or ransomware.

The West has fallen. It's all over now.

Shoutout to the random person who tried to social engineer our staff into getting a free 5 year anniversary shirt. They were convinced this person was a giveaway winner and contacted other staff for verification.

B+ social engineering attempt. Almost got 'em

Hello,

Yes we know we still haven't enabled comments. You nerds literally remind us every single day. We promise we'll do it. Give us time, we're busy.

If you go to DEFCON this year you can visit the Data Duplication Village and clone yourself a copy of vx-underground. All it requires is an 8TB drive

Additionally, as a DEFCON exclusive, the drive will contain something secret

And no, we won't be at DEFCON. We don't go outside

We 'randomly' selected the FBI to receive free vx-underground swag. They ignored us and left us on read.

Got ego'd by the FBI 😭😭😭😭

We're partnering up with our sponsor TorGuard to offer a torrent (and if you're cool you'll seed) for vx-underground. You can stop sending us e-mails, messages, DMs, and smoke signals.

More information coming soon.

Thanks to our friends TorGuard and the degenerates from the DEFCON Data Duplication Village (ly7ine) we now allow individuals to torrent vx-underground

Note: Not all torrents are available yet

You can download the torrents here:
https://vx-underground.org/Torrents

A young man, presumably from the COM scene, is beginning to gain traction on Twitter for his calm and collected thoughts. A modern day philosopher

tl;dr some kid with a gun (airsoft, maybe?), talking about beaming people (?), and saying 'fuck da opps' and some Chicago gang stuff despite being .... 11? 12? maybe 13?

https://x.com/sgtmuffon/status/1793319240641950068

We received our first dick pic today. We don't really have anything else to say – but we felt like sharing that.

Good morning, afternoon, or night.

We've given away roughly $500 worth of merch for the 5 year giveaway. Dozens of people have been contacted. The giveaway is still ongoing due to the volume of people who entered.

tl;dr denial-of-service via nerd overflow

Updates to vx-underground

Samples:
- VirusSign.2024.05.15
- VirusSign.2024.05.16
- VirusSign.2024.05.17
- VirusSign.2024.05.18
- VirusSign.2024.05.19
- VirusSign.2024.05.20
- VirusSign.2024.05.21
- VirusSign.2024.05.22

Torrents:
- vxunderground.HD.APTs.WEBRip.torrent

Papers:
- 2024-04-29 - Zloader Learns Old Tricks
- 2024-04-30 - Latrodectus [IceNova] – Technical Analysis of the New IcedID
- 2024-05-01 - Router Roulette - Cybercriminals and Nation-States Sharing Compromised Networks
- 2024-04-30 - Pouring Acid Rain
- 2024-05-05 - Latrodectus "LittleHw"
- 2024-04-17 - Redline Stealer - A Novel Approach
- 2022-04-21 - Criminals provide Ginzo stealer for free, now it is gaining traction