People living inside my computer,

I have updated the website which apparently most of you didn't know existed

I collect malware source code, samples, papers, and builders.

I've added more malware, I've stopped counting, but it's a big number

https://vx-underground.org/Updates

ShinyHunters is ransoming ... HALLMARK CARDS

Those fucking shitty birthday cards you pick up at the drug store ARE BEING HELD RANSOMWARE

WHO RANSOMS BIRTHDAY CARDS

(info via AlvieriD)

Dawg, I saw some stinky nerds discussing this recently identified malicious NPM package

This is, by a significant margin, some of the worst malicious code I've ever seen. I don't mean 'worst' as in dangerous, I mean this code is HOT garbage

https://socket.dev/npm/package/3-ways-how-to-get-free-gems-in-clash-of-clans834/files/1.0.2/package%20gene.py

This dumb son of a bitch hardcoded the username 'Administrator' because that is (probably) the username on his (or her) machine. You're supposed to resolve the username with %USERPROFILE%, ya fuckin' goof

Hello to all my Telegram friends who messaged me about Axios supply chain attack.

I'm well aware it happened. Here is reaction when it occurred in near real-time

Here is another one of my reactions (I was in bed)

Big shenanigans on the internet today as Threat Researchers speperhypothulate that the Threat Actor responsible for the Axios supply chain attack may have accidentally DoS'd their own infrastructure from the volume of data coming in

Pathetic

I wanted to say propose, speculate, theorize, hypothesize, but I couldn't pick a word, so I made up speperhypothulate. I'm basically Shakespeare

1. This isn't fake.

2. Credentials are stored as hashes. It should be literally, with no exaggeration, impossible for a vendor to know your credentials while uppercase UNLESS they weren't storing passwords as hashes.

What the fuck is HSBC India doing?

I've seen some conversations online that suggest HSBC India has been transforming credentials with ToUpper prior to hashing. Now with a new code base, or something, in place users must now type in all upper case to account for the previous implementation

Okay, if that is true, isn't that a colossal fuck up? They were stripping case sensitivity while also telling users they need uppercase and lowercase letters? What the fuck is going on over there?

CISCO SOURCE CODE STOLEN

BITCH ITS TUESDAY

STOP

I'm sorry for yelling and the bad words. It has been a very intense 1 week and 2 days.

It has been so dramatic it borders on some kind of sadistic comedy piece

Whoa

Core audience (my nerds and stinky internet degenerates), I made a post about an hour ago intended for my nerd homies about family shenanigans. I thought it was kind of funny, mildly interesting.

It somehow escaped core audience at a high rate of speed and some really weird people were making some really weird comments.

We got supply chain attacks, malware, and premium pictures of kitty cats, we do not have time for non-nerds stinking up the place.

Yikes.

Anyway, more updates on silly internet stuff soon. It involves malware and will include a picture of a cat.

Cheers

This is about Twitter. I had fat Americans commenting, yapping about nonsense and talking about GOD. Weirdos

Haha I just pulled off the most totally epic and based le prank xD

I just detonated ransomware on my works domain controller. Haha man, this is going to be such an epic prank.

April 1st for the win!!! My boss is gonna be all like FUUUUUU-

haha PWNED

I want you to know it physically hurt me to write like this. The cringe was so immense I could feel my body buckling under the cringe pressure.

I have no idea how Elon Musk unironically speaks like this still.