vx-underground
I've had so many people talk to me about looking for entry level material for malware, I've decided to give writing a book another try. I'm going to call it "Malware for Noobs" and just schizo rant a bunch on my blog until I think it's enough for a book
Maybe someone will pick it up and I can have it published at a fancy place like Barnes and Noble, then I can be called cool and badass and people can make fun of me
π€86π€£24π₯12β€8π4π3β€βπ₯2π₯°2π’1
Some dork on Instagram is accusing me of being behind the whole Mecca Chameleon steam malware thingie and says @IntCyberDigest labeled me the criminal, or something, I don't know.
I'm not even mad they called me a criminal, I'm mad they would accuse me of making weak malware.
I've got a family now, I'm basically a born again Christian, I drive the speed limit, wear socks with sandals, and tuck my shirt into my cargo shorts. I don't do anything even close to illegal.
However, if I was going to switch it up and become a full fledged Threat Actor, I am NOT going to do something half-baked like this Mecca Chameleon thing, I'm going to develop an information stealer, partially AI generated, written in like five different programming languages, and storing the payload on something goofy like a Billie Eilish instagram comment. Then I am going to sell it online on some place like Tier1 and deal strictly in XMR.
I am insulted you would think I would stoop so low to do something like a malicious Steam game (or hijack).
I'm not even mad they called me a criminal, I'm mad they would accuse me of making weak malware.
I've got a family now, I'm basically a born again Christian, I drive the speed limit, wear socks with sandals, and tuck my shirt into my cargo shorts. I don't do anything even close to illegal.
However, if I was going to switch it up and become a full fledged Threat Actor, I am NOT going to do something half-baked like this Mecca Chameleon thing, I'm going to develop an information stealer, partially AI generated, written in like five different programming languages, and storing the payload on something goofy like a Billie Eilish instagram comment. Then I am going to sell it online on some place like Tier1 and deal strictly in XMR.
I am insulted you would think I would stoop so low to do something like a malicious Steam game (or hijack).
π₯°139π44π€£42β€11π11π₯5π―4β€βπ₯3π’2
vx-underground
Some dork on Instagram is accusing me of being behind the whole Mecca Chameleon steam malware thingie and says @IntCyberDigest labeled me the criminal, or something, I don't know. I'm not even mad they called me a criminal, I'm mad they would accuse me ofβ¦
Nah, but bro said, "vx-underground is an educational website about malware; everything they use or test is done for ethical purposes. It is important to get informed before looking for someone to blame."
tinchoocabrera is the homie wtf i love him
tinchoocabrera is the homie wtf i love him
π₯°210β€28β€βπ₯14π«‘10π4π’2π2
I sat down and did some schizo ranting for my attempt at a book I might name "Malware 4 Noobs" (no idea yet).
Here is my introduction segment, part zero (no reforms or changes made yet).
If you're noob, please read and give feedback.
https://malwaresourcecode.com/home/my-projects/write-ups/part-i-malware-4-noobs-version-0
Here is my introduction segment, part zero (no reforms or changes made yet).
If you're noob, please read and give feedback.
https://malwaresourcecode.com/home/my-projects/write-ups/part-i-malware-4-noobs-version-0
Malwaresourcecode
Part I - Malware 4 Noobs (version 0) | malware source code
β€147π±15π₯10π7π«‘4β€βπ₯2π’1
I'm about to crash out
You're a fucking bum if you use AI to write your research papers. If I see one more "WHY THIS MATTERS" I'm going to lose my fucking shit bro
You're a fucking bum who can't do research, you depend on a subscription model to think for you, and your bum ass can't even comprehend what happened so you need to spend more money to have it "write".
Then I see all these corny ass replies, people larping like they've read the "write-up", when anyone with a shred of self-respect, integrity, and critical-thinking skills, know it's a big stinky sloppy pile of pig shit
HOW DO YOU INTEND ON GETTING A JOB IF YOU DON'T KNOW ANYTHING?
Okay, I'm done screaming at my computer monitor. I'm going to go eat dinner, tonight we're having pizza. I am excited because I like pizza and it makes me happy.
Mwah, kissies, love you all lots
You're a fucking bum if you use AI to write your research papers. If I see one more "WHY THIS MATTERS" I'm going to lose my fucking shit bro
You're a fucking bum who can't do research, you depend on a subscription model to think for you, and your bum ass can't even comprehend what happened so you need to spend more money to have it "write".
Then I see all these corny ass replies, people larping like they've read the "write-up", when anyone with a shred of self-respect, integrity, and critical-thinking skills, know it's a big stinky sloppy pile of pig shit
HOW DO YOU INTEND ON GETTING A JOB IF YOU DON'T KNOW ANYTHING?
Okay, I'm done screaming at my computer monitor. I'm going to go eat dinner, tonight we're having pizza. I am excited because I like pizza and it makes me happy.
Mwah, kissies, love you all lots
β€208π―49π8π₯7β€βπ₯3π3π€£2π€―1π’1
vx-underground
I'm about to crash out You're a fucking bum if you use AI to write your research papers. If I see one more "WHY THIS MATTERS" I'm going to lose my fucking shit bro You're a fucking bum who can't do research, you depend on a subscription model to think forβ¦
But seriously, I promise you your peers and colleagues know you're making slop and you should feel fucking embarrassed. Like, it physically hurts me to see these people produce slop and think it's actually impressing anyone other than other slop makers
Okay, love you lots, mwah
Okay, love you lots, mwah
β€129π―31π7π€£5π₯4β€βπ₯3π1π’1
1 like = 1 malware
π665β€72π€14π3π€2π’2π€©2β€βπ₯1π₯1π₯°1π1
vx-underground
1 like = 1 malware
This received nearly 2,000 likes. I will upload 2,000 malwares to prod in your honor.
Just kidding.
I'm pushing 275,000 malwares (I was prepared for 275,000 likes)
Pic unrelated
Just kidding.
I'm pushing 275,000 malwares (I was prepared for 275,000 likes)
Pic unrelated
β€163π€£50π₯°15π₯8π6π3π«‘3π’1
tl;dr Trump administration said "ransomware, fraud, cybercrime is for nerds and the nerds pissing me off bigly fr"
Then he said, "fuck it, hit is up, if you're cool we'll let you perform hack backs, it's not even a big deal anymore, whatever fuck it bro, do your thing"
Then he said, "fuck it, hit is up, if you're cool we'll let you perform hack backs, it's not even a big deal anymore, whatever fuck it bro, do your thing"
π€£114π₯°23π€―11β€4π’3π1
vx-underground
tl;dr Trump administration said "ransomware, fraud, cybercrime is for nerds and the nerds pissing me off bigly fr" Then he said, "fuck it, hit is up, if you're cool we'll let you perform hack backs, it's not even a big deal anymore, whatever fuck it bro,β¦
Then everyone clapped and said, "wow thats a totally unique idea" then they said "gng, chinas been doing this bro, on god"
π€£73π₯°27β€4π1π’1
I checked my DMs today.
I was thanked for the vx-underground drives at the DEFCON Data Duplication Village
I was not aware vx-underground copies would be at the DEFCON Data Duplication Village
I was asked about the vx-underground party at DEFCON
I was not aware vx-underground had a party at DEFCON
I was thanked for the vx-underground drives at the DEFCON Data Duplication Village
I was not aware vx-underground copies would be at the DEFCON Data Duplication Village
I was asked about the vx-underground party at DEFCON
I was not aware vx-underground had a party at DEFCON
π€£148β€38π₯3π3π±2π1
vx-underground
I checked my DMs today. I was thanked for the vx-underground drives at the DEFCON Data Duplication Village I was not aware vx-underground copies would be at the DEFCON Data Duplication Village I was asked about the vx-underground party at DEFCON I wasβ¦
Kind of weird, because I'm the only person on this social media profile now (Bradley is still gone), and I'm the only person who works on vx-underground now.
But, ... okie dokie ...
But, ... okie dokie ...
π«‘87π€£35π₯9π’4β€2π1
> be me
> decide to buy new electric shaver
> go to store
> purchase
> $239.99
> ultra mega fuck off shaver 9000
> go home
> open box
> requires Bluetooth connection
> requires making an account
> requires location sharing
> collects information about shaving habits
> decide to buy new electric shaver
> go to store
> purchase
> $239.99
> ultra mega fuck off shaver 9000
> go home
> open box
> requires Bluetooth connection
> requires making an account
> requires location sharing
> collects information about shaving habits
π€£216π’39β€10π€5π±3π«‘3π1π1π1π€―1π1
vx-underground
> be me > decide to buy new electric shaver > go to store > purchase > $239.99 > ultra mega fuck off shaver 9000 > go home > open box > requires Bluetooth connection > requires making an account > requires location sharing > collects information about shavingβ¦
I don't know why my shaver needs my first name, last name, email address, telephone number, an app installed, bluetooth enabled, location sharing enabled, and local network device finding enabled ... to trim my beard
π€£143β€15π10π―9π’8π€4π±3π1
I keep seeing terrible news about crypto theft, kidnapping, hacks, etc.
I've come up with a solution.
I'll build a special place where you can safety store your cryptocurrency. It will have polite people that greet you when walk in the building, some sort of vault that is fire proof, tornado proof, flood proof, etc. The place will be clean, play boring music, but it'll make you feel fancy and stuff.
You can safety deposit your crypto currencies into this build. I will establish a relationship with the local police department, install panic buttons to immediately notify them if anyone tries any funny business. I'll also implement boring rules, procedures, and protocols, to ensure employees are incapable of stealing your cryptocurrencies.
In exchange for holding your cryptocurrency I'll charge a nominal fee, monthly or annually, alternatively I will borrow against your cryptocurrency to invest into other things.
I'll call it "table", because when we talk business we'll be sitting a table.
I'm a god damn genius
I've come up with a solution.
I'll build a special place where you can safety store your cryptocurrency. It will have polite people that greet you when walk in the building, some sort of vault that is fire proof, tornado proof, flood proof, etc. The place will be clean, play boring music, but it'll make you feel fancy and stuff.
You can safety deposit your crypto currencies into this build. I will establish a relationship with the local police department, install panic buttons to immediately notify them if anyone tries any funny business. I'll also implement boring rules, procedures, and protocols, to ensure employees are incapable of stealing your cryptocurrencies.
In exchange for holding your cryptocurrency I'll charge a nominal fee, monthly or annually, alternatively I will borrow against your cryptocurrency to invest into other things.
I'll call it "table", because when we talk business we'll be sitting a table.
I'm a god damn genius
π€£170β€18π₯8π€―5π4π€3π€2π’1
vx-underground
I keep seeing terrible news about crypto theft, kidnapping, hacks, etc. I've come up with a solution. I'll build a special place where you can safety store your cryptocurrency. It will have polite people that greet you when walk in the building, some sortβ¦
Omfg bro, I just accidentally invented the modern banking system.
They even stole my idea of "table". Banks are called banks because it used to be "bench" because they would talk business while sitting on a bench at the local marketplace
Omg bro people always steal my ideas
They even stole my idea of "table". Banks are called banks because it used to be "bench" because they would talk business while sitting on a bench at the local marketplace
Omg bro people always steal my ideas
π€£130β€19π€11π₯2π€―1π1
This media is not supported in your browser
VIEW IN TELEGRAM
Looks like Christmas came early this year boys.
We got ourselves a Threat Actor distributing malware masquerading as a reverse engineering tool, trying to compromise security researchers.
Thanks for the goop, ya doofus
We got ourselves a Threat Actor distributing malware masquerading as a reverse engineering tool, trying to compromise security researchers.
Thanks for the goop, ya doofus
π₯97π€£38β€16π1π€1π’1
> be me
> get dm
> its my friend @Intel80x86
> author of @HyperDbg
> wtf i love him
> open message
> "smelly i got goop"
> wtf i love goop
> "i found malware campaign"
> wtf i love malware campaigns
> "The Threat Actor(s) have created a website which is specifically tailored to malware analysts, or reverse engineers, who utilize hypervisor-based frameworks. Their malware campaign appears to have begun about 8 days ago. I became aware of the issue when their "product" compared themselves to HyperDbg. Their website is clearly vibe coded, however parts appear to be in Mandarin"
> wtf theyre targeting people who like goop
> sends url to website
> vt01[.]com
> look inside
> lol ai slop
> go to download page
> vt01[.]com/en/download
> immediately flagged as malware by firefox
> allow download plz
> split nanosecond touches the disk
> windows: OMFG MALWARE!!!
> ??? this malware STINKS
> sha256: 5934d1a64afd62e7d1badb81e8613e01efe9cf9c7d6748271c6d0761e3b11eb7
> look inside
> delphi, weird PE sections
> throw into triage
> YARA rules IMMEDIATELY identify the malware family
> XRed
> wtf is XRed?
> cant remember any family named XRed
> December, 2025: XRed impersonates Indian Ministry of Finance and Income Tax Department
> December, 2025: XRed targets US and UK companies that do business in India
> March, 2025: XRed targets manufacturing companies in the United Kingdom
> May, 2025: Threat Actors compromise ProColored, their driver update was compromised to push XRed
> July, 2025: Threat Actors compromise video game mouse company, push malware to video game players who use EndGame Gear for gaming
this is strange goop
> get dm
> its my friend @Intel80x86
> author of @HyperDbg
> wtf i love him
> open message
> "smelly i got goop"
> wtf i love goop
> "i found malware campaign"
> wtf i love malware campaigns
> "The Threat Actor(s) have created a website which is specifically tailored to malware analysts, or reverse engineers, who utilize hypervisor-based frameworks. Their malware campaign appears to have begun about 8 days ago. I became aware of the issue when their "product" compared themselves to HyperDbg. Their website is clearly vibe coded, however parts appear to be in Mandarin"
> wtf theyre targeting people who like goop
> sends url to website
> vt01[.]com
> look inside
> lol ai slop
> go to download page
> vt01[.]com/en/download
> immediately flagged as malware by firefox
> allow download plz
> split nanosecond touches the disk
> windows: OMFG MALWARE!!!
> ??? this malware STINKS
> sha256: 5934d1a64afd62e7d1badb81e8613e01efe9cf9c7d6748271c6d0761e3b11eb7
> look inside
> delphi, weird PE sections
> throw into triage
> YARA rules IMMEDIATELY identify the malware family
> XRed
> wtf is XRed?
> cant remember any family named XRed
> December, 2025: XRed impersonates Indian Ministry of Finance and Income Tax Department
> December, 2025: XRed targets US and UK companies that do business in India
> March, 2025: XRed targets manufacturing companies in the United Kingdom
> May, 2025: Threat Actors compromise ProColored, their driver update was compromised to push XRed
> July, 2025: Threat Actors compromise video game mouse company, push malware to video game players who use EndGame Gear for gaming
this is strange goop
π€88β€28π€£16π11π―5π’1