Minneapolis public schools says it is facing technical issues following an encryption event

Minneapolis public schools says it is facing technical issues following an encryption event (meme #2)

DISH Network, an American television provider, has been subject to a "cyber attack".

The "cyber attack" has been so crippling that employees haven't worked in days, their web domain is offline, and employees don't know if they'll be paid ???

More info: https://www.bleepingcomputer.com/news/security/dish-network-goes-offline-after-likely-cyberattack-employees-cut-off/

Reminiscing on CockLock ransomware

During the COVID-19 pandemic someone made ransomware for chastity belts by exploiting the sex toys remote control feature on Android devices.

tl;dr ransom penises

The United States Marshal Service (USMS) has been ransomed. The USMS is responsible for apprehension of wanted fugitives.

The systems ransomed contained information on legal processes, administrative information, and PII on subjects being investigated

https://www.cnn.com/2023/02/27/politics/us-marshals-service-ransomeware-attack

We stumbled across a giant bag of VPN trials. What do we do with them?

Since the beginning of the Russia-Ukraine conflict 23 Russian Oligarchs and Military Elite have fallen out of Windows.

Marina Yankina, a high-ranking official in Russia's Defence Ministry, was found dead on the side walk in St. Petersburg.

Windows are incredibly dangerous.

The LastPass drama is wild.

- LastPass breached in 2022, old news.
- LastPass admits a DevOps employees machine was compromised and Threat Actors took company corporate vault
- LastPass makes support bulletins more difficult to find, removed from search engines with 'noindex'

Motherhood is the human body biologically assembling code and then deploying to prod several months later

Today the Russian Federation made an amendment to "Federal Law No. 149-FZ - On information, information technologies and information protection".

Russia now prohibits the usage of "information exchange systems" owned by foreign entities.

See attached image for list of bans.

What's coming up?
- Updates to the Malware Defense paper collection
- Updates to the VX-API
- Updates to the Malware Source Code repository
- Updates to the "The Old New Thing" collection
- Updates to the Malware Sample collection
- Book release: Black Mass Vol. 2 (April)

vx-underground is actively seeking papers on Remote Scrotum Detonation attacks

Our friend SPTHvx, the legendary virus writer, has returned from a 10 year hiatus. On his return he has produced a proof-of-concept demonstrating the encoding, decoding, and mutation of virus code using ChatGPT in a natural language.

Check it out here: https://www.vx-underground.org/other.html#code_mutation

We've made some updates to vx-underground.

1. We've updated the malware defense collection. We've added 92 new malware analysis papers.

2. We've updated the Archive section. We've archived Singularity OS, Microsofts open-source OS written in C#

Have a nice day.

It appears vx-underground will pass 200,000 Twitter followers in June, 2023. At 200,000 followers this will unlock new functionality for vx-underground

1. Ability to cancel people on Twitter
2. We can cut in line at airports and restrooms
3. Unlocked "Don't you know who I am?"

We've updated the VX-API

- CreateProcessFromINFSectionInstallStringNoCab
- CreateProcessFromINFSetupCommand
- AmsiBypassViaPatternScan

Shellcode execution by abusing: SymEnumProcesses, ImageGetDigestStream, VerifierEnumerateResource, SymEnumSourceFiles

https://github.com/vxunderground/VX-API

We've updated "The Old New Thing" collection. We've archived the month of February, 2023.

Special thanks to _BradleyVX for curating the papers.

Check it out here: https://www.vx-underground.org/the_old_new_thing.html#the_old_new_thing_-_2023_02

Seeing Shell32.dll export a function titled "PathYetAnotherMakeUniqueName" makes us question the psychological well-being of Microsoft developers

"The best and most beautiful things in the world cannot be seen or even touched — they must be disassembled with IDA." -Helen Keller

ALPHV ransomware group has ransomed Lehigh Valley Health Network, a healthcare network based out of Pennsylvania.

ALPHV has issued threats to the healthcare organization and has begun leaking photographs of topless female breast cancer patients