We've updated our Windows malware paper collection

- 2020-02-29 - Windows Kernel Ps Callbacks Experiments
- 2020-08-02 - Removing Kernel Callbacks Using Signed Drivers
- 2023-05-20 - Demonstrating using SMS as a C2

Check it out here: https://www.vx-underground.org/windows.html

Your chances of being a victim of ransomware increases over 250% if your organization owns a computer.

Do not use computers.

[Reposted, apparently people didn't get the joke]

The RaidForums database has been leaked online. It has information on 478,000+ users.

It was leaked on Exposed - an up-and-coming forum wanting to fill the void Breached left.

The administrative staff of Exposed would not tell us the source of the RaidForums database leak.

We have seen a trend in Threat Actors selling "AV/EDR" killers. We have decided to unveil our own AV/EDR killer program.

See attached image for more details.

Have a nice day.

We've updated the vx-underground malware family collection.

- CaddyWiper
- IsaacWiper
- HermeticWiper
- BitRAT
- LorenzRansomware
- Valyria
- WizardUpdate
- AridGopher
- ClipBanker
- Vidar

Check it out here: https://samples.vx-underground.org/samples/Families/

We've updated the vx-underground InTheWild collection.

- InTheWild.0072
- InTheWild.0073
- 40,000 unique malware samples

Image: Win32.GandCrab.

Check it out here: https://samples.vx-underground.org/samples/Blocks/

A few days ago Adobe unveiled "Firefly". Firefly is generative AI which is now included in Photoshop. They released a demonstrative video preview.

It is interesting.

We've updated the vx-underground malware family collection.

- MidasRansomware
- HeaderTip
- Mirai
- DoubleZeroWiper
- Vidar
- Conti
- RaccoonStealer
- CaddyWiper
- TinyTurla
- IcedId

Check it out here: https://samples.vx-underground.org/samples/Families/

As more and more 'experts' discuss the risk of AI we would like to address the reality of the situation. It is far more disturbing than anyone could ever imagine.

Hello. How are you?

We've had some individuals reach out to us regarding some of our tweets. It is important to note some of our tweets are satirical, hyperbolic, and/or designed to illustrate the absurdity of some 'hype' seen on social media.

Have a nice day.

Rargb, the famous torrenting site, has shut down. Administrative staff gave a statement on why the site has abruptly shutdown

Today the FBI announced they're investigating "The Comm" - shortened for "The Community". A community of online simswappers, swatters, cyberstalkers, and individuals who gamble online.

They announced the arrest of members in a group titled "ACG".

Has science gone too far?

A demonstration of generative AI imaging and facial aging

Support the people you love ❤️

Earlier this morning vx-underground was temporarily suspended from Twitter due to copyright infringement. Twitter received a DMCA complaint, from a snippet of a music video we shared, on 2023-01-27.

This Twitter account has posted some wild things. We have spoken with Threat Actors, disclosed news on leaks, gotten autographs from people on the FBI Most Wanted List, gotten electronic devices from North Korea...

Our down fall? A 30 second clip of "Doja cat - Mooo"

Today Kaspersky announced they were a victim of an iOS zero-click 0day exploit. The exploit delivered spyware targetting Kaspersky middle and upper management.

They named the attack 'Operation Triangulation'

More info: https://usa.kaspersky.com/blog/triangulation-attack-on-ios/28444/

Kaspersky asserts they were NOT the primary target of the attack. Forensic evidence illustrates a long history of this spyware and have stated more details will be released soon.

Today the FSB (Federal Security Service of the Russian Federation) released a statement stating that the United States government has targeted, and infected, thousands of Russians that were using Apple iPhones devices.

More information: http://www.fsb.ru/fsb/press/message/single.htm!id=10439739@fsbMessage.html

Russia: Kaspersky and the Russian FSB disclose information on an iOS 0day exploit

NATO Territory: Security vendors are disclosing news on a MOVEit 0day exploit being exploited in the wild to mass exfiltrate data from organizations.

Yay! 0day Thursday! =D