vx-underground
45.5K subscribers
3.9K photos
413 videos
83 files
1.42K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
what the fuck thats me
🀣91πŸ₯°12πŸ‘10😁4❀2😒1
I received this image quite some time ago. I've been sitting on it. Staring at it. Contemplating the duality of life.

Can anyone guess what this image is?
🀣71πŸ₯°11❀7πŸ”₯3😒1
vx-underground
I received this image quite some time ago. I've been sitting on it. Staring at it. Contemplating the duality of life. Can anyone guess what this image is?
This is (allegedly) Transport For London. I received this image over 1 year ago.
😱26🀣17πŸ‘8πŸ”₯5😒1
Dawg, one of the Scattered Spider guys ransomed a bunch of companies, made $36,000,000, then used the money for Uber Eats and Steam 😭

They had him from Uber Eats bro 😭
🀣121😁11😎7🫑5😒2
DAWG. They social engineered the United States judicial system (???), reset someone's password by pretending to be helpdesk, and LOOKED THEMSELVES UP
🀣84😎7πŸ€“6❀2😒1🀩1
jubair.complaint.pdf
214.7 KB
Official court document on United States v Jubair (Scattered Spider, Earth2Star)
πŸ₯°18πŸ”₯7❀2😒1
vx-underground
DAWG. They social engineered the United States judicial system (???), reset someone's password by pretending to be helpdesk, and LOOKED THEMSELVES UP
Imagine being "INDIVIDUAL-1". The FBI just kicks in your door asking who "Austin" is 😭
🀣50😒5❀2
Chat, I'm not a crypto nerd.

In this Scattered Spider court document, they state Mr. Jubair a/k/a Earth2Star received approx. 920.16BTC from performing ransomware attacks.

How difficult is it to safely launder 920.16BTC?

(approx. $108,062,646 as of this writing)
😱47❀9πŸ’―5😁2😒1
> Scattered Spider ransoms company for 964BTC
> wtf_thats_alot.jpeg
> Document says "Cost of BTC at time was $36M"
> $36M / 964BTC = $37.5K
> BTC value was $37.5K in November, 2023
> Google "Ransomware, November, 2023"
> omfg.exe
🀯89🀣22πŸ‘11❀3😒1
There's people on Xitter saying "The COM" is an ANTIFA, LGBTQIA, Furry, Transexual anti-American gang funded by George Soros

This has occured because FBI Director Kash Patel mentioned 764 in a Senate hearing. Ameriburgers who don't do computers looked up 764, found "The COM" on Wikipedia, and now think "the COM" is some sort of Democrat (American Liberal) funded organization

Dawg wtf LOL
🀣86😁9πŸ”₯4❀2😱1😒1
The craziest thing about the entire Scattered Spider trilogy is how simple they operated and how effective it was

They didn't utilize 0day exploits. They didn't utilize novel and "undetectable" malware. They didn't exploit N-days or try to find vulnerable external facing machines.

All they did was call the help desk. That's it. That's literally it.

Scattered Spider performed basic reconnaissance from social media (LinkedIn), investor websites, and dug up any information they could about the company.

Then they called the help desk.

That's how they compromised banks, critical infrastructure, casinos, car manufacturers, petroleum companies, luxury brands, government entities, air lines, and record labels.

Once they got access they used basic open source tooling from GitHub. It was never anything super fancy.

All of these companies invested heavily into Threat Intelligence, SOC analysts, Endpoint Detection Response software, DFIR experts, and anything else you can think of and it was defeated by doing basic research on the company and calling the help desk

We're so fucked
🀣103❀16πŸ’―10πŸ€”7πŸ‘4😒2πŸ”₯1πŸ₯°1
vx-underground
The craziest thing about the entire Scattered Spider trilogy is how simple they operated and how effective it was They didn't utilize 0day exploits. They didn't utilize novel and "undetectable" malware. They didn't exploit N-days or try to find vulnerable…
Im telling you right now bro, if a girl joined in on their Scattered Spider spree, it would have been x100 worse.

Imagine some girl calls in. She tells the dork at the help desk that she's confused, doesn't understand computers, and says shit like "hehe you sound cute" or "wow you're so smart".

Bro would fold in a nanosecond. All security protocols right out the fuckin window.

That would probably be the first compliment that mfer on helpdesk has had in his life. They'd give that chick access to the domain controller if she wanted

Anyway, that's my nightmare fuel for you.
🀣148πŸ’―30πŸ”₯7πŸ‘2😒2❀1πŸ₯°1🫑1
I guess I'll be doing a talk at Dakota State University via Discord.

Their cybersecurity club leader person (?) approached me and persuaded me to do a talk. They have expert negotiation skills. It was a long back and forth.

See attached image for the intense negotiation and bartering.
😁119πŸ”₯21πŸ₯°19🀣12❀11😒1
Crazy seeing a ZachXBT cameo performance in the Scattered Spider ransomware trilogy

Scattered Spider made $12,000,000 from ransoming Caesar Palace in Las Vegas.

But then ZachXBT popped up and help freeze the funds in January, 2024.
🀣49❀10πŸ₯°4😒1
❀57🀣53🀯12πŸ’―5😒4πŸ”₯1😁1
Yesterday I made a post discussing women performing social engineering.

The post (and joke) was that if a woman calls helpdesk, pretends to be dumb with computers, acts confused, and comments things like "hehe you sound cute" or "wow, you're so smart", then exploitation is much easier.

Help desk nerds probably haven't received a compliment in years and would fold in a nanosecond.

Subsequently, someone commented, "How can someone counteract this?"

The answer is simple. Hire women.

It's a well known and scientific fact women are immune to other women trying to coerce them. It is equivalent to a fire type Pokemon trying to fight a fire type Pokemon.

If the helpdesk lady encounters a woman pretending to be dumb, she'll immediately pick up on it.

Help desk lady will not fold.

Help desk lady will not fall for the trap.

Help desk lady will be annoyed instead of flattered.

Help desk lady is our only true savior
πŸ”₯84🀣54❀16πŸ’―9πŸ€”7🀯5πŸ€“4😒2πŸ₯°1