The government of Oakland, California, has been hit by ransomware.

Bravo for the full disclosure and not saying this is a "cyber incident".

https://twitter.com/Oakland/status/1624142546946633729

We've updated the vx-underground malware sample collection.

- Virusshare 0458, Virusshare0459
- 80,000+ unique samples
- All named using Kaspersky naming convention

Check it out here: https://samples.vx-underground.org/samples/Blocks/

Twitter administration have determined making access to the Twitter API exclusively an enterprise privilege to be ... not ideal.

They have implemented free and limited usage which will suffice for our RansomwareNews bot.

tl;dr RansomwareNews bot not going anywhere.

https://twitter.com/RansomwareNews

We've updated the vx-underground Windows malware paper collection. The latest additions demostrate the following:

- Unhooking NTDLL from Disk
- Unhooking NTDLL from KnownDlls
- Unhooking NTDLL from Remote Server
- Unhooking NTDLL from Suspended Process

https://www.vx-underground.org/

Ransomware but instead of encrypting files and extorting your company, it makes you watch corporate compliance training videos on repeat

Microsoft in 2023: Windows 11 will allow tabs in the Windows Explorer!

Microsoft in 1995:

The Israel Institute of Technology was hit by ransomware this morning.

- DarkBit ransomware (???)
- Ransom note is political
- Attackers want $1,700,000+ (80 BTC)
- Ransom note is written using an English translator

Image courtesy of CyberIL

We've made some improvements to The Old New Thing archive. All papers from Raymond Chen are organized by year, month, and now date.

Thanks _BradleyVX for the additions

Check it out here: https://www.vx-underground.org/the_old_new_thing.html

.@CrowdStrike had an American Super Bowl LVII commercial this year. This may be the first cyber security product advertisement in Super Bowl history

The estimated Super Bowl LVII advertisement commercial cost is $6,500,000 for 30 seconds.

Behold the latest addition to the Marvel cinematic universe: IRQL_NOT_LESS_OR_EQUAL man

Hi,

tl;dr Doctor told me to stop or I'll drop dead at 40 from a heart attack

We are happy to announce we are hosting our first ever Malware Research Contest! Sponsored by our friends at SentinelOne


* Must be novel research
* Applicants can only be from the United States due to anti-gambling and money laundering laws
* First place is a new Macbook Pro ♥️

We've updated the vx-underground Windows Malware Paper collection

-2022-01-28: The good the bad & the stomped function
-2023-01-29: Indirect Syscall is Dead Long Live Custom Call Stacks
-2023-02-14: Adopting PIC from Object Files for Threadless Injection

https://vx-underground.org/windows.html

Roses are Red,
Violets are Blue,
We were busy uploading malware on Valentines day,
So download this shit boo ♥️

- InTheWild.0061
- 20,000+ unique malware samples
- Courtesy of petikvx


Download here: https://samples.vx-underground.org/samples/Blocks/

Hello,

The chatroom has been deleted for the time being (again, deletion #2). Too many complaints have come in from social media regarding the channel. Moderation is insufficient - we do not have enough time or resources to moderate appropriately. Additionally, the channels purpose was to discuss malware, the topic was more often than not, not malware.

At a later period of time, when we have sufficient resources, the chatroom will return to allow discussions on posts, etc.

We've updated the vx-underground Linux malware paper collection

- 2020-05-20 - Code injection in running process using ptrace
- 2020-08-16 - Process Injection On Linux
- 2022-10-12 - A Technical overview of Code Injection

Check it out here: https://vx-underground.org/linux.html

We've updated the vx-underground ICS SCADA collection

- 2017-06-12 - Win32-Industroyer A New Threat for Industrial Control Systems
- 2022-04-12 - Industroyer2 Industroyer Reloaded
- 2022-06-01 - Industroyer vs. Industroyer2

Check it out here: https://vx-underground.org/ics_scada.html

February 14th, United States Republican Congressman Clay Higgins tweeted that he is working on passing legislation that allows life imprisonment, without the possibility of parole, for cyber criminals.

He also makes a snarky remark about ... weight?