Ernst & Young, a member of the CISA assembled RTF (Ransomware Task Force) has been a victim of cl0p ransomware group from the MoveIT 0day exploit.

Information via Brett Callow

Here is the full video of the Polish CBZC (Central Bureau for Combating Cybercrime) arresting individuals associated with DDoS as a Service providers.

Viewer discretion is advised. The levels of dorkiness are off of the charts.

We asked Lockbit ransomware group administrative staff their thoughts on the recent arrest of their affiliate Ruslan Magomedovich Astamirov.

Lockbit staff replied: "he should have practiced better opsec."

Google has sold Google Domains to SquareSpace for $180,000,000.

Reminder that any product Google produces, they will kill off and send to the infamous Google graveyard.

ALPHV ransomware group claims to have stolen data from Reddit.

Intel via AlvieriD

vx-underground staff are at max capacity. Every staff member is currently busy.

We have several large projects still in the works. Thank you to everyone who supports us with merchandise purchases or monthly donations.

P.S. We fixed the Discord bot. Thank you for notifying us.

We managed to get our hands on two TriangleDB (Operation Triangulation) samples.

This is iOS spyware allegedly developed by the United States government.

We will share them shortly.

cl0p ransomware group has historically been quiet. They rarely addressed journalists or spoke with researchers. It's nice seeing them comment on the BBC article about them (albeit on their blog).

cl0p, if you're reading this message: your name makes us think of little horsies 🥰🥰

cl0p ransomware group claims to have ransomed Sony and PWC.

cl0p claims to have exfiltrated 120GB of data and archives from PWC.

cl0p has not stated how much data (if any) was exfiltrated from Sony.

We've updated the vx-underground malware sample collection.

- TriangleDB
- CaddyWiper
- DoubleZeroWiper
- BlisterLoader
- HeaderTip
- Denoia
- Remcos
- WizardUpdate
- Blackcat
- Sharkbot
- AvosLocker
- NetSupportRAT
- Mirai
- IcedId

Check it out here: https://samples.vx-underground.org/samples/Families/

TriangleDB is (or was) allegedly developed by the United States government. This iOS spyware was delivered via an iOS 0day exploit chain.

Apple has now patched the exploits.

DeepInstinct released a paper on a new malware family titled "PindOS". PindOS is named as such because the user-agent in the malware is "PindOS".

Interesting that this malware family user-agent is "PindOS" because "пиндос", pronounced "pindos", is a derogatory term in post-soviet countries used to describe people from the United States of America. Pindos is a derivative of "Pindostan", "Pindosia", or "United States of Pindostan".

More information:
https://www.deepinstinct.com/blog/pindos-new-javascript-dropper-delivering-bumblebee-and-icedid

June 15th the United States military released a report regarding unknown, and unsolicited, smartwatches being sent to United States service members.

These devices are attempting to collect user data on military officials.

More information:

https://www.cid.army.mil/Media/Press-Center/Article-Display/Article/3429159/cid-lookout-unsolicited-smartwatches-received-by-mail/