Hello,

Thank you to the many people who volunteer their services or wish to be a intern. Unfortunately, we are not an official entity on paper and our work is primarily aggregating samples and papers.

For students asking about interning: what we do is trivial (and painful) work which we do not believe would be beneficial for a student to do. We believe real world exercises, in actual cooperate environments (or startups, pick your poison), is far more important than helping some goofy website online.

For those wishing to volunteer: our work is simple, send us cool papers you enjoy, send us malware samples you found. It is nothing special. If we think what you discovered is cool, we will happily add it. We will also happily add your own research or papers. However, this is no full time position unless you intend of doing nothing by reading papers all day - which we do not believe is beneficial for anyone:)

Regardless, it is always heartwarming seeing so many young people offering (or asking) if they can help. We wholeheartedly appreciate your messages. It is very kind of you. Thank you for the love so many of you show us daily. It means a lot.

Concerning website updates:

We have migrated all of our content over to our new data host. However, we are unhappy with the current look of the website and the difficulty of maintaining it.

The current theme (?) of the website is all of the data encapsulated into a singular HTML form, with some javascript to enable searching. This has resulted in the website index file being a staggering 16MB, and continually growing larger.

This is not a viable long-term solution. We have decided to allocate this down time now to pursuing an actual web application which will permanently act as the new vx-underground website. It will be dynamic, allow searching, and allow us to easily add new content. It will also contain a site map so you nerds can scrape it to your hearts content.

The reality of the situation though is developing something like this will be time consuming, hence we have not made any new updates the current site because eventually all of these new additions would need to be ported over to the new website.

Sit tight, we're using your donor money, sponsor money, swag money, and book money to have an actually talented person develop something nice that we can all enjoy. Until that days arrives, we will just be hoarding data.

Sorry about the downtime, but we'd rather (try) to do things right (we normally don't do things right the first time, but we try 😂).

Thank you syr0_ for this wordlist, it will help many people.

https://github.com/0xsyr0/vx-underground-wordlist

Today a Threat Actor shared with us his attempt to SMS-phish an individual at a large company. As you can see from the attached image, it went very well.

Richard Stallman, the man behind GNU, copyleft, and way too many others accolades to even list, announced at GNU 40 that he has cancer.

Fortunately, he reports that it is slow growing and completely manageable. He says he isn't going anywhere.

He is 70.

Users all across the globe are reporting they are seeing a "You've been blocked" message when trying to access Discord.

It appears there has been a CloudFlare misconfiguration somewhere...

Have a nice Friday, Discord 🙂

Will someone PLEASE tell Indian scammers that nobody uses the word "kindly"

Update: we are now blocked too =D

It worked earlier this morning. It is like a regional slow-roll-out botched deployment from Discord.

However, the mobile app works.

tl;dr block all traffic from Discord.exe?

wuv u 2

Hello,

We do not share or archive Cobalt Strike or BruteRatel builders and/or leaks because they are intellectual property of individuals or organizations.

We anger enough people with our content or conversations, we don't want a lawsuit 😂

Thanks,

Someone sent us a message with a proposal. They said they know a vulnerable company. They proposed that we compromise the company, exfiltrate the data, and ransom it.

They want 50% of the payout.

50% FOR WHAT LOL YOU'RE ASKING US TO DO EVERYTHING

1. We're not criminals
2. This is a horrible deal. Who the hell would even possibly accept this?! 50% of an IDEA?!

POV: You visit http://vx-underground.org one time

Slay queen

"I've never installed GNU/Linux" - Richard Stallman

Throw back to when Richard Stallman put out a "personal ad" looking for a romantic partner. This is from 2009, he has archived the ad and noted he is no longer single.

We have a Discord server which gives updates on recent ransomware group blog postings, government notifications, and other nerd stuff.

It also has 5,520 members. No talking is allowed though. It is a nice and quiet place.

https://discord.gg/MSjAQe4PUy

October 4th the United States Federal Communications Commission will be running a nationwide emergency alert test.

Every TV, radio, and cell phone will receive an alert at the same time at 2:20pm EDT.

However, the far more interesting news in relation to this is the conspiracy theorists asserting this is the United States government vaccine activation protocol.

tl;dr something something FTE 5G nanobots activate?