More updates to vx-underground.

- The Old New Thing archive has been updated for August, 2023 and September, 2023

- The Malware Analysis collection has been updated, 95 new malware analysis papers have been added via @malpedia.

More to come. 🫡

https://www.vx-underground.org/

David, why you gotta leave us a mixed review on our book because of Amazon recommendations 😭

It's that time of the year again.

ALPHV ransomware group has an AffiliatePlus program. Once affiliates make over $1,500,000 in profit they're given "a promotion" to AffiliatePlus status. Included in the AffiliatePlus program is access to "Munchkin", their custom Linux OS.

See image for details.

malware spelled backwards is racecar

beep beep

1 like = 1 malware

🙏🙏🙏🙏

Our 1 like = 1 malware post has gotten over 100,000 likes. We will upload over 100,000 new samples to the VXDB.

(just kidding, it was a reference to boomer facebook posts, but we are really uploading over 100,000 new malware samples).

Have a nice day:)

What the hell kind of captcha is this? Who the hell is Koshigaya Komari?

We uploaded 100,000 samples today. It turns out we already ingested them all sometime in the past.

Another 95,796 malware samples queued for upload.

1. Yes, we're playing with malware from a physical Windows machine

2. No AV & Windows Defender is disabled. We're not cowards

3. Lost track of queue order, they're just labeled "Number Next".

We've updated the vx-underground Windows malware paper collection.

- Running Exploit As PPL From Userland
- Polyshell - Bash, Batch and Powershell Polyglot
- Lets Go VS Code - Using VS Code as a Reverse Shell
- Demonstrating a Rust based Bootkit

https://www.vx-underground.org/

On our way to being a billionaire group

$34.05 😭

RansomVC claims to have compromised the Colonial Pipeline

???

*We have not reviewed any of the leaked files from RansomVC to confirm it's authenticity. It's Friday night.

snlyngaas of CNN spoke with a representative from the Colonial Pipeline. We have attached their statement below.

tl;dr third party compromised?

Hello,

We need another malware sample queue going. Please send us a giant list of malware SHA256's to download.

*Minimum of 500 SHA256 hashes
*Ideally 10,000+ SHA256 hashes
*Non-SHA256 hashes will be ignored
*Upload list to pastebin, delimited by new lines

Thanks,

Mr Robot wasn't a good show

We've updated the vx-underground malware sample collection

- RedLine
- RecordBreaker
- Vidar
- FormBook
- RhadamanthysLoader
- Xenomorph
- SnakeKeylogger
- Remcos
- AgentTesla
- Lokibot
- CatB
- LgoogLoader
- MagniberRansomware
- AsycnRAT

https://www.vx-underground.org/

The very second you share an opinion on Twitter

She's a 10 but Excel thinks she's an October

When you're reverse engineering some obscure function in Windows you will almost ALWAYS end up on a Chinese forum.