vx-underground
46K subscribers
3.95K photos
420 videos
83 files
1.44K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
Media is too big
VIEW IN TELEGRAM
The latest release from Operation Endgame has been released.

In this video it is evident that Law enforcement agencies across the globe banded together to pay for roughly 30 seconds of Skrillex sound bites
🀣98❀11πŸ”₯5πŸ™5πŸ‘4😘3😒1
Crazy to think we've got Fed anime and Fed dubstep before we got Elder Scrolls VI or Grand Theft Auto VI
🀣119πŸ”₯8❀4πŸ™3πŸ‘1πŸ‘1😒1
Previously on Dragon Ball Z: Law enforcement agents seized the BreachForum backend and placed a 'this site has been seized' sticker on the BreachForum landing page. However, shortly after the takedown, BreachForum quickly returned online.

Fast forward to today: BreachForum administrative staff issued a statement on their forum to Breach members and law enforcement agencies. The messages are attached to this post.

Breach administrative staff also shared e-mail's between them and their host provider

In summary Breach administrative staff assert law enforcement failed to successfully executive a seizure and inadvertently caused damage to a business who is not affiliated with them. Breach administrators also some how acquired the e-mail correspondence between law enforcement agencies and their host provider.
🀣128🀯8❀2πŸ”₯2😒1
vx-underground
Previously on Dragon Ball Z: Law enforcement agents seized the BreachForum backend and placed a 'this site has been seized' sticker on the BreachForum landing page. However, shortly after the takedown, BreachForum quickly returned online. Fast forward to…
"successfully executive"

Imagine if we could make a single post without sounding like a bunch of idiots
❀‍πŸ”₯61🀣28❀5😁4πŸ‘2πŸ”₯2πŸ’―2πŸ₯°1😒1πŸŽ‰1
Today the National Police of Ukraine, in conjunction with the Cyber Department of the Security Service of Ukraine, announced a takedown of multiple 'hacker services'.

The takedown is in partnership with the United States, France, the Netherlands, the United Kingdom, Northern Ireland, Denmark, and Germany in what is now being labeled as "Operation Endgame".

The raids disclosed today are related to 'Pikabot', 'IcedId', and 'AlexCrypt'. These malicious tools and malware campaigns are explicitly noted by the National Police of Ukraine as being in the arsenal of Russian-based Threat Groups 'BlackBasta', 'REvil', and 'Conti'.

Raids were conducted in unspecified regions of Ukraine. However, it is noted suspected developers, suspected administrators, and suspected operation organizers were raided. Furthermore, servers were 'blocked' (?), mobile devices were seized, and computer equipment was seized.

More information: https://cyberpolice.gov.ua/news/zablokovano-xakerski-servisy-svitovyx-kiberzlochynnyx-organizaczij-slidchi-naczpolicziyi-ukrayiny-doluchylysya-do-mizhnarodnoyi-speczoperacziyi-endgame-2143/
🀣63πŸ‘20❀7😒5πŸ‘1πŸ€”1🫑1
We are aware that one of the images released by the National Police of Ukraine, during a raid from Operation Endgame, shows an arrest of a naked person.

No information is given on who this person is or why they're naked.

tl;dr prolly raided while showering or going potty
🀣108🫑27😁7😒2
This media is not supported in your browser
VIEW IN TELEGRAM
Security researcher GossiTheDog shared a TikTok video from Microsoft employees showing Microsoft Recall.

Rest assured that malware will not be able to access it and your privacy is safe (joking, it's super unsafe)
🀣129πŸ‘11❀4😱3πŸ€”2😁1😒1
vx-underground
Security researcher GossiTheDog shared a TikTok video from Microsoft employees showing Microsoft Recall. Rest assured that malware will not be able to access it and your privacy is safe (joking, it's super unsafe)
The good news: prompted UAC, administrative privileges required to access this folder

The bad news: still easily accessible
🀣135😁7πŸ‘6πŸ”₯5πŸ‘1😒1
May 26th Hudson Rock began investigating the alleged TicketMaster breach and the subseuent Santander Bank breach. They spoke with an unidentified Threat Actor(s) claiming responsibility for the breach. Hudson Rock was able to confirm some of their statements.

They discovered Snowflake, a large cloud storage provider, was impacted by Lumma Stealer.

The unidentified Threat Actor states they were able to get access to those companies by Infostealer malware, which allowed them to log into ServiceNow and bypass OKTA.

The unidentified Threat Actor(s) stated they're trying to extort Snowflake for $20,000,000 but Snowflake has ignored them. The Threat Actor(s) also claim to have exfiltrated sensitive data from over 400 companies which use Snowflake.

More information: https://www.hudsonrock.com/blog/snowflake-massive-breach-access-through-infostealer-infection
πŸ”₯46πŸ‘3😱3❀2
Media is too big
VIEW IN TELEGRAM
Law enforcement has released a new 'episode' of Operation Endgame. The video is odd.
πŸ€“93🀣27πŸ€”4😒3❀2πŸ‘2😘2πŸ™1
Previously on Dragon Ball Z, the individuals who claim responsibility for the TicketMaster breach stated they got access via a Managed Service Provider – which was later determined to be Snowflake. They claimed access was gotten via an infostealer.

Today Live Nation Entertainment a/k/a TicketMaster reported to the SEC that they had indeed been compromised (SEC link attached at the bottom of post)

Hudson Rock confirmed that employee credentials from Snowflake were stolen via a Lumma Stealer campaign. However, Snowflake put out a statement today stating they have not been compromised and that they believe the individual companies were compromised as a result of poor security practices. White Intel corroborated the findings from Hudson Rock by disclosing more information on the Lumma Stealer campaign.

Will Snowflake reverse their statement and say they're compromised? Will TicketMaster data be leaked online? Will Lumma Stealer keep hitting large companies? Will more data from Snowflake be leaked online? Find out on the next episode of Dragon Ball Z

Official SEC report: https://www.sec.gov/Archives/edgar/data/1335258/000133525824000081/lyv-20240520.htm
🀣68❀11πŸ‘4😁2🫑2😒1
We believe in security through obscurity.

That's why we use a custom built OS that relies on CLGUI (Command Line Graphical User Interface, pronounced KLA GOO EE). It uses images instead of text for the CLI.

Instead of DIR or LS we use a picture of Chicken. GREP is a Kitty
🀣120😁10🫑7❀‍πŸ”₯6🀯6πŸ‘2πŸ”₯2πŸ€”2❀1😒1πŸ€“1
We've broken 300,000 followers on Xitter

Thank you for the love and support.

Cheers to 400,000

Love youβ™₯️
❀116❀‍πŸ”₯18πŸ€“11πŸŽ‰6πŸ₯°5πŸ‘3πŸ‘2🀣2πŸ”₯1
Old computer advertisements are badass
❀‍πŸ”₯102πŸ”₯16😁11🫑9😎3❀2πŸ‘1πŸŽ‰1
Good morning,

Several people have asked about an account named 'vxugsupp'. We are not vxugsupp. We do not know who that is. The only staff members from vx-underground on Telegram are @smellyvx (hi, it's me, smelly) and @BradleyVX

Have a nice day. Enjoy the rest of your weekend.
πŸ‘63😁25🫑11❀8😒3