No major updates today. We are busy.

Please accept this image of a cat as a token of an apology.

The 3CX supply chain attack was the result of previously undiscovered X-Trader supply chain attack

The 3CX CEO wasn't lying about an upstream vendor being the result of the compromise.

tl;dr supply chain attack to supply chain attack

More information: https://www.mandiant.com/resources/blog/3cx-software-supply-chain-compromise

We've updated the vx-underground malware sample collection. We have added new samples for the following families:

- Nanocore
- AsyncRAT
- NetwireRAT
- AgentTesla
- LokiBot
- Formbook
- CobaltStrike
- NjRat
- Chaos Ransomware

Check it out here: https://samples.vx-underground.org/samples/Families/

You can subscribe to vx-underground Blue™ for only $5.99/month.

Nothing is different, but you get a wear a dunce hat

Today someone stole 3,600lbs (1632kg) of Gold from the Toronto Pearson Airport. It is valued at roughly $100,000,000.

The police currently have no suspects. Unrelated to malware of course, but such a ballsy heist is impressive.

More information:
https://www.cbc.ca/news/canada/toronto/gold-heist-pearson-airport-toronto-1.6817345

Use Twitter image description feature as a C2.

See example in attached link: https://twitter.com/vxunderground/status/1649251062820249600

The European Union likes distributing malware

Information via bigfack

Symantec Threat Hunter Team discovered the X-Trader supply chain attack, which resulted in the 3CX supply chain attack, hit critical infrastructure - European and American electrical grid suppliers

More information: https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/xtrader-3cx-supply-chain

There is a direct correlation between hours of anime watched and reverse engineering skills.

The longer someone watches anime, the better they are at reverse engineering.

Scientists do not know why.

Andy Greenberg's book "Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency" is an incredible book. It reads well. It allows a reader to understand the flaws in cryptocurrency and truly emphasizes the incredible research by people like Sarah Meiklejohn.

This isn't an advertisement for him - this book is genuinely an amazing read. Shoutout to Andy.

We've updated the vx-underground malware sample collection. We have added new samples for the following families:

- AgentTesla
- AsyncRAT
- WhisperGate
- RagnarLocker
- YoungLotus
- Blackmoon
- Emotet
- Remcos
- Trickbot

Check it out here: https://samples.vx-underground.org/samples/Families/

Suicide is not the answer. Seeking help is a sign of strength.

We've updated the vx-underground malware source code collection. We've added Win32.SimpleWalletClipper.Xss.

Special thanks to BasssterLord/NationalHazardAgency for getting the source code for us.

Check it out here: https://github.com/vxunderground/MalwareSourceCode/tree/main/Win32/Stealers

We've updated the vx-underground malware collection.

- InTheWild.0067

We have added new samples for the following families:

- BlackCatRansomware
- FormBook
- AsyncRAT
- Amadey
- Danabot
- Emotet
- WhisperGate
- LokiBot
- Remcos

Check it out here: https://vx-underground.org/malware.html

The password to all of our archives is 'infected'

The compressed files we create, which is created from Linux or Windows OS's, are not natively compatible with MacOS

MacOS uses a different methodology to compress files and directories. The 'unzip' utility will not work, sorry.