Note: Per the insights from a space nerd, SWGlassPit, this is publicly available telemetry originally released for a now defunct project known as ISS live.

tl;dr ISS lets you monitor pee-pee and poo-poo? We had no idea =D

Real-time monitoring is here: https://iss-mimic.github.io/Mimic/

We have pioneered a new method for extending WiFi technologies (we stole it actually). Our methodology uses aerodynamic engineering, or whatever fancy word works here. Please see the attached image which demonstrates our technology. We believe this was revolutionize WiFi.

The past 72 hours we have added 221,319 new malware samples to the VXDB. We only have 15,778,681 samples remaining. 🫡

Reminder that the VXDB is free for anyone to use. Oh, and it's open source.

https://virus.exchange

Have a nice day.

When Scattered Spider compromised MGM they tried to modify code for the slot machines to make them spit out money 😂😂

These nerds are going full Ocean's Eleven

While we're busy uploading data to the VXDB, and migrating data to our new host, feel free to add one of our members on Rocket League.

In homage to Wazawaka's wild antics, the Rocket League account is: "MIKHAIL MATVEEV"

Hello,

We are aware ALPHV ransomware group criticized us for spreading misinformation. They incorrectly attributed us to the Financial Times article about ALPHV affiliates attempting to tamper with slot machines

We will speak with ALPHV and resolve the issue.

Thanks,

U+4VeZwaR37JIofFHKafYTXVXQhP278yfarcWWRwZlI=

Okay, we deleted the previous tweet because now we're giving away 4 one year subscriptions to MULLVAD. Hahaha.

It on Twitter:)

https://twitter.com/vxunderground/status/1702720582293311896

While everyone is focusing on the catastrophe of the MGM breach, it should be noted that it is business as usual for other ransomware groups.

Note: Publicly listed victims on ransomware websites indicate the victim did not pay and/or negotiations are still on-going.

- Cactus ransomware group was the most active this month (so far), with 30 new victims publicly displayed. Their victims are primarily agricultural and industrial organizations.

- ALPHV ransomware group claims 19 new victims in September. Besides MGM, they have claimed law firms, architecture and design companies, real estate companies, physicians offices, investment companies, and media analysis companies.

- Lockbit ransomware group claims 19 new victims as well. Lockbit ransomware group most notably targeted a non-profit hospital, a Behavioral health center for the mentally ill, 2 school distracts located within the United States, and law firm which represents American Veterans who need legal assistance.

- CryptBB, a new and emerging group, claimed 8 victims, most notably a school district in the United States.

- NoEscape claims to have compromised US-Canada water organization, the International Joint Commission, and threatens to leak sensitive government data.

- BianLain attacks Save the Children International, a 104 year old non-profit which aided children who were victims of WW2 nazi concentration camps (among many other incredible deeds).

- RansomedVC claims 30 new victims this month, primarily leveraging web exploitation and intimidation tactics.

Other active ransomware group activity this month: RagnarLocker, Threeam, CiphBit, Trigona, Knight, Akira, Monti, Stormous, Blacksuit, Play, RansomHouse, IncRansom, Lorenz, BlackByte, Qilin, RaGroup, Everest, Mallox, Medusa, Rhysida, 8base, Abyss.

In the month of September, 2023, there have been over 200 newly documented ransomware attacks. Again, this does not include victims who have paid.

The most notorious groups still remain on top: ALPHV and Lockbit. Both have existed (in some manner) since at least 2019.

For Black Mass Volume II we spent an extra shiny penny, from our own pockets, to hire an artist who is an illustrator for Magic: The Gathering, Mythgard Tcg, Hit PointPress, Adi Shankar/Netflix, Legendary Games, and more.

Thanks to Wero Gallo Arias for the amazing work.

We have passed 23,000 subscribers on Telegram.

Thank you for the love and support. ❤️

We look forward for continually serving you all with malware source code, samples, papers and our dumb memes.

Thanks,