vx-underground
47.6K subscribers
4.12K photos
440 videos
84 files
1.49K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
September 3rd, Lara Trump (daughter-in-law of former U.S. President Donald Trump) and Tiffany Trump (daughter of former U.S. President Donald Trump) had their X accounts compromised.

Their accounts briefly shilled some sort of crypto stuff. X locked the accounts within minutes.
๐Ÿคฃ78โค10๐Ÿค”8๐Ÿ‘3๐Ÿ˜1๐Ÿ˜ข1
vx-underground
September 3rd, Lara Trump (daughter-in-law of former U.S. President Donald Trump) and Tiffany Trump (daughter of former U.S. President Donald Trump) had their X accounts compromised. Their accounts briefly shilled some sort of crypto stuff. X locked the accountsโ€ฆ
> compromise high profile social media accounts tied to powerful american political figures
> can do catastrophic damage
> shills crypto
๐Ÿ’ฏ86๐Ÿคฃ64๐Ÿ˜7๐Ÿ‘3๐Ÿ˜ข1
pizza topping must be a valid email address
๐Ÿ’ฏ111๐Ÿคฃ27๐Ÿค“21๐Ÿ˜14๐Ÿคฏ8โค2๐Ÿ‘1๐Ÿ˜ข1
vx-underground
pizza topping must be a valid email address
pepperoni_is_ok_i_guess_im_not_picky@gmail
๐Ÿคฃ130โค10๐Ÿ’ฏ6๐ŸŽ‰3๐Ÿ˜2๐Ÿค“1
RansomHub ransomware group claims to have ransomed Planned Parenthood
๐Ÿคฃ85๐Ÿ˜ข52๐Ÿ”ฅ14๐Ÿค”11๐ŸŽ‰6๐Ÿ™6โคโ€๐Ÿ”ฅ4๐Ÿ‘4โค2๐Ÿคฉ2๐Ÿ’ฏ1
We have performed a colossal oopsie doopsie.

Our malware ingestion system prepended 'file=' to every file being sent to VirusTotal, thus impacting AV vendors down stream. Sent vendors hundreds of thousands of botched malware samples
๐Ÿคฃ147๐Ÿ˜ฑ27๐Ÿ”ฅ12๐Ÿ˜‡8๐Ÿ‘6๐Ÿซก6โค5๐Ÿค“4๐Ÿ˜3๐Ÿ˜ข2๐Ÿ‘1
vx-underground
We have performed a colossal oopsie doopsie. Our malware ingestion system prepended 'file=' to every file being sent to VirusTotal, thus impacting AV vendors down stream. Sent vendors hundreds of thousands of botched malware samples
We were made aware of the issue when AV companies contacted us regarding our VirusTotal account and the files being corrupted.

tl;dr my bad yall (its free, so fuck you, but seriously were sorry were fixing it)
โค90๐Ÿคฃ39๐Ÿค“16๐Ÿ˜ข4๐Ÿ‘3๐Ÿ”ฅ1๐Ÿ˜1๐Ÿค”1
Improving the homelab today โ€” decided to run some cables through the wall to be fancy.
๐Ÿคฃ123๐Ÿ”ฅ14โค8๐Ÿ‘5๐Ÿ˜3๐Ÿ˜ข3๐Ÿค2๐ŸŽ‰1
Today the United States Department of Justice indicted Russian nationals Elena Afanasyeva and Kostiantyn Kalashnikov for violations of the Foreign Agents Registration Act (FARA), and conspiracy to commit money laundering.

Afanasyeva and Kalashnikov remain at large as of September 4th.

Afanasyeva and Kalashnikov are accused of laundering money to covertly fund as much as $10,000,000 to English-speaking social media companies (listed as U.S. Company-1) to sway content in favor of the Russian government.

Interestingly, the indictment states the company which received the funds is described as, "a network of heterodox commentators that focus on Western political and cultural issues". Journalists and researchers have tied this to Tennessee-based company Tenet Media ... because ... it has the exact same message on their homepage verbatim.

This media company employees conservative media commentators Lauren Southern, Tim Pool, Tayler Hansen, Matt Christiansen, Dave Rubin, and Benny Johnson.

The indictment is interesting, discusses the money laundering techniques, disinformation campaigns, and their chat communication medium ... on Discord.

Image 1 is U.S. Company-1 per the indictment. Image 2 is Tenet Media.

More information: https://www.justice.gov/opa/pr/two-rt-employees-indicted-covertly-funding-and-directing-us-company-published-thousands
๐Ÿคฃ58๐Ÿ‘21โค6๐Ÿ˜ข6๐Ÿ”ฅ4๐ŸŽ‰3๐Ÿซก3๐Ÿ˜2๐Ÿ˜ฑ2๐Ÿคฏ1
๐Ÿคฃ243๐Ÿ˜34โค11๐Ÿค5๐Ÿ”ฅ4๐Ÿคฉ4๐Ÿ™4๐Ÿซก4๐Ÿฅฐ2๐Ÿ˜‡2๐ŸŽ‰1
This media is not supported in your browser
VIEW IN TELEGRAM
One time a high ranking official for the United States National Security Agency made a post on Twitter about memes.

We sent them a private message. They never responded.

This is the video we sent:
๐Ÿซก73๐Ÿคฃ61โค8๐Ÿค”5๐Ÿคฏ4๐Ÿ˜3๐Ÿ‘2๐Ÿ˜ข1๐Ÿคฉ1๐Ÿ’ฏ1๐Ÿค“1
Updates to vx-underground:

*Note: Image of cat used per request. Not all requests are granted, but this is a wizard kitty.

Archive:
- The Old New Thing, July 2024
- The Old New Thing, August 2024

Papers:
- 2024-09-04 - Rundll32 and Phantom DLL lolbins, 32-bit version
- 2024-08-10 - Sneaking around with Web Assembly
- 2024-08-04 - WhenFS - Using Google Calender as a Filesystem
- 2024-08-02 - Using Windows Setup for persistence
- 2024-07-01 - Booting Linux off of Google Drive
- 2024-06-11 - Lets Go into the rabbit hole part 2 - the challenges of dynamically hooking Golang programs
- 2023-10-03 - Lets Go into the rabbit hole - the challenges of dynamically hooking Golang programs
๐Ÿ‘37โคโ€๐Ÿ”ฅ22๐Ÿ”ฅ8๐Ÿ’ฏ3โค2๐Ÿฅฐ2๐Ÿ˜1๐Ÿ˜ข1
๐Ÿคฃ92๐Ÿค”23โคโ€๐Ÿ”ฅ18๐Ÿ’ฏ11โค5๐Ÿซก5๐Ÿ‘4๐Ÿ”ฅ4๐Ÿ˜3๐Ÿ˜1๐Ÿ˜ข1
No updates today. We're just gonna kick back, relax, and play some Elder Scrolls
๐Ÿ”ฅ77๐Ÿคฃ26โค8๐Ÿ˜ข6๐Ÿ‘4๐Ÿ‘4๐Ÿค“3๐Ÿ˜1๐Ÿซก1
Hello,

Just because you did 1 thing for me 1 time does not make you a core contributor, volunteer, or member. It does not mean you're my friend, it does not mean you can list me as a reference.

Wake up. Stop making this weird.

We've had like, 6 people now say they're part of vx-underground because they personally assisted me like, one time, 3 years ago.

It's called doing someone a favor. It doesn't mean you can put it on a resume.

Also, these companies do background checks, and when they contact me via e-mail, or Telegram, or Discord, and say "do you know this person?" and send me your resume and photo, it makes you look like a giant jackass when I have to say "I have no idea who that is"

-smelly
๐Ÿคฃ252๐Ÿค“20๐Ÿ‘19โค10๐Ÿ˜ข6๐Ÿ˜ฑ5๐Ÿ”ฅ4๐Ÿ˜‡3๐Ÿ‘2๐ŸŽ‰2๐Ÿ˜Ž1
๐Ÿ‘€๐Ÿ‘€๐Ÿ‘€๐Ÿ‘€๐Ÿ‘€
๐Ÿคฃ255๐Ÿ˜20๐Ÿ˜Ž15๐ŸŽ‰3๐Ÿ˜3โค2๐Ÿ‘2๐Ÿ˜ข1
Dear 'gay4smellyvx'

Yes, we can see your friend request and user activity. We will allow you to continue using your Call of Duty account โ€” you're a funny person.
๐Ÿคฃ159๐Ÿฅฐ26โค17๐Ÿ˜ข6๐Ÿ˜4๐Ÿ˜2๐ŸŽ‰2๐Ÿ‘1
malware means malicious software

it does not mean MyAnimeList software
๐Ÿคฏ106๐Ÿคฃ35๐Ÿ˜ข9๐Ÿ‘8๐Ÿ˜7๐Ÿค”5โค2๐Ÿ˜ฑ2๐Ÿซก1
got a new office chair
๐Ÿ”ฅ116๐Ÿคฃ60โค11๐Ÿ‘8๐Ÿ˜5๐Ÿ˜ฑ2๐Ÿค“2โคโ€๐Ÿ”ฅ1๐Ÿ˜Ž1
vx-underground
got a new office chair
(i work from home)
๐Ÿ™55โค16๐Ÿคฃ8๐Ÿ”ฅ4๐Ÿ˜2๐Ÿ‘1