We've updated the vx-underground malware sample collection

- BumbleBeeLoader
- GoodWillRansomware
- Hydra
- IceXLoader
- PureCrypt
- RaccoonStealer
- Rekoobe
- Saitama
- SmokeLoader
- SysLogk

https://www.vx-underground.org/

cl0p ransomware group released a statement on their website. They claim they can no longer access their email, due to technical issues, and have created a new one.

July 13th Pompompurin, the previous administrator of the infamous Breached forums, plead guilty to 3 charges in federal court.

- Conspiracy to Commit Access Device Fraud
- Access Device Fraud – Unauthorized Solicitation
- Possession of Child Pornography

Dissent Doe has more information on this. We have not yet pulled the full court document.

Information via dedale

More information: https://www.databreaches.net/owner-of-breachforums-pleads-guilty-in-federal-court-to-a-charge-that-shocks-everyone/

We've updated the vx-underground malware sample collection

- AvosLocker
- BazarLoader
- CobaltStrike
- Emotet
- HiveRansomware
- IcedId
- Joker
- Kovter
- Loda
- MuddyWater.Alien
- QakBot
- RaccoonStealer
- Razy
- ShadowPad
- SnakeKeylogger

https://www.vx-underground.org/

A high-level overview on the current cl0p ransomware MoveIT campaign.

cl0p has compromised 2 massive non-profit educational institutions (TIAA & NSC) via MoveIT.

This compromise gave them intel, access, or PII on 5,000,000+ educators, 18,600 institutions in 50 countries.

Today ALPHV ransomware group threatened Highland Health Systems, a community mental healthcare center in Anniston, Alabama. They claim to have stolen 1.8TB of data

They state they will be calling patients and staff members via the telephone.

Why harass the mentally ill?

The facility helps children who are victims of abuse, adults who battle with substance abuse, individuals who are mentally handicapped (or disabled) and are unable to care for themselves.

They also work with schools, crisis response, and families.

Why harass these people?

We've updated the vx-underground malware sample collection

- AlmondRAT
- BlueSkyRansomware
- BruteRatel
- CubaRansomware
- Dracarys
- Dridex
- Emotet
- OrBit
- RedLine
- ROMCOMRat
- SpyNote
- VSingle

https://www.vx-underground.org/

ALPHV ransomware group administrative staff have informed us they have removed the HHS posting on their website.

They informed us the affiliate had broken the rules. However, they did NOT break the rules regarding the victims status (healthcare, non-profit).

???

We've updated the vx-underground malware sample collection.

- Asbit
- AsyncRAT
- DCRat
- IRATA
- MeowRansomware
- Micropsia
- Mirai
- MooBot
- NetSupportRAT
- PlayRansomware
- Remcos
- SmokeLoader
- XBinder
- XWorm
- YTStealer

https://www.vx-underground.org/

Threat Actors have successfully gotten PII on every malware analyst on the planet

https://borncity.com/win/2023/07/17/data-leak-exposes-data-of-registered-virustotal-customers/

You may not like it, but this is what an elite hacker looks like

Meanwhile in Scotland

> *sign in to twitter*
> more large companies ransomed
> *scroll*
> more critical RCEs
> *scroll*
> nerd fight
> *scroll*
> more crypto scams
> *scroll*
> *scroll*

Money mule advertisements look pretty authentic

We have the malware

We've updated the vx-underground malware sample collection

- BianLianRansomware
- BlackcatRansomware
- BumbleBeeLoader
- CrytoxRansomware
- DarkCloud
- Eamfo
- Exmatter
- LilithBot
- LockBitRansomware
- MagicRAT
- MedusaLocker
- Nullmixer
and more...

https://www.vx-underground.org/