This video has millions of views and is appearing on Facebook, Instagram, and TikTok.

Key points:

- Don't check Facebook with your microwave
- Every product on the planet is based out of the United States, duh
- FBI agents glow in the dark
- The Matrix song goes hard

We have finished archiving The Old New Thing blog from Raymond Chen. It is nearly 3 decades of articles - dates ranging from July, 2003 to December, 2022.

We will now begin our next large project.

Check it out here: https://www.vx-underground.org/the_old_new_thing.html

We've updated the vx-underground APT collection. We have added samples and papers from December 2022 and January 2023.

Special thanks to f0wlsec for the papers, samples, and aggregating the content as always

Check it out here: https://www.vx-underground.org/malware.html#2023

We've updated the vx-underground InTheWild collection. We've added volumes 0037, 0038, 0039, and 0040. It is 80,000 new unique malicious binaries.

Special thanks to petikvx for aggregating the malware samples.

Check it out here: https://samples.vx-underground.org/samples/Blocks/

Updating and aggregating content on Industrial Control System malware is a nightmare

Lockbit Green, the newest addition to Lockbit ransomware group's arsenal, is based off the Conti source code leak

Lockbit Red - Lockbit 2.0, custom ransomware
Lockbit Black - BlackMatter ransomware groups code
Lockbit Green - Conti ransomware groups code

https://github.com/prodaft/malware-ioc/blob/master/LockBit/green.md

Kaspersky's latest report indicated only 45% of crime forum job postings allowed remote work.

TV pitch: a mockumentary sitcom, similar to The Office, that follows the day-to-day antics of a Russian-based ransomware group

In the first episode of офис (the Office) a young Максим Якубец (Maksim Yakubets a.k.a. Aqua) fatally poisons his rival co-worker resulting in his untimely death

(or piss off NATO: Ukrainian authorities received a tip from United States intelligence and United Kingdom intelligence regarding the couple).

Windows 11 now lets you create unsigned MSIX packages for "testing". You can install your "legitimate" "application" for "testing" without needing to sign it. Microsoft states this was developed to making "testing" easier

More information: msft.it/6012e7gKi

P.S. Do not use this "feature" to "distribute" your "application" "widely".

This week malware threat hunters have reported:

- AgentTesla exfiltrating data using Discord webhooks
- Ursnif using malicious .one files
- Increased usage of Rhadamanthys stealer
- Large increase in malvertising campaigns on Google

We've uploaded an additional 160,000 unique malware samples to vx-underground. They are volumes 0047 - 0054 of the InTheWild collection.

Thanks to @petikvx for all the hard work.

Check it out here: https://samples.vx-underground.org/samples/Blocks/

We've updated the vx-underground Malware Analysis collection. We've added 109 new malware analysis papers from 2013, 2014, 2018, 2019, 2021, 2022, and 2023.

tl;dr lots of new stuff.

Check it out here: https://www.vx-underground.org/malware_defense.html#malware_analysis_2023

Image courtesy of bellafusari1

1. According to Lockbit ransomware group, they announced on various forums Lockbit Green is based off of the Conti source code leak

2. It appears that Lockbit monitors Twitter