vx-underground
45.4K subscribers
3.9K photos
413 videos
83 files
1.42K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
❀57🀣53🀯12πŸ’―5😒4πŸ”₯1😁1
Yesterday I made a post discussing women performing social engineering.

The post (and joke) was that if a woman calls helpdesk, pretends to be dumb with computers, acts confused, and comments things like "hehe you sound cute" or "wow, you're so smart", then exploitation is much easier.

Help desk nerds probably haven't received a compliment in years and would fold in a nanosecond.

Subsequently, someone commented, "How can someone counteract this?"

The answer is simple. Hire women.

It's a well known and scientific fact women are immune to other women trying to coerce them. It is equivalent to a fire type Pokemon trying to fight a fire type Pokemon.

If the helpdesk lady encounters a woman pretending to be dumb, she'll immediately pick up on it.

Help desk lady will not fold.

Help desk lady will not fall for the trap.

Help desk lady will be annoyed instead of flattered.

Help desk lady is our only true savior
πŸ”₯84🀣54❀16πŸ’―9πŸ€”7🀯5πŸ€“4😒2πŸ₯°1
vx-underground
Yesterday I made a post discussing women performing social engineering. The post (and joke) was that if a woman calls helpdesk, pretends to be dumb with computers, acts confused, and comments things like "hehe you sound cute" or "wow, you're so smart", then…
This playfully sexist joke is sponsored in part by NyQuil. You can drink NyQuil even if you're not sick.

Thank you, NyQuil, for making me possess deranged thoughts such as comparing women to Pokemon
🀣74❀11πŸ₯°8❀‍πŸ”₯2😱2πŸ”₯1😒1🫑1
Today is a day of mourning.

We have been informed Turbo the Kitty Cat has passed away.

Rest in Peace, Turbo
🫑213😒74❀10πŸ™6πŸ‘1😱1πŸŽ‰1
Chat, if an employee at a social media company takes a bribe to reinstate banned accounts, is that considered an insider threat?
πŸ’―40🀣21πŸ‘6πŸ€”4❀2😱1😒1
❀82😍9πŸ’―6😱4🀣4πŸ₯°2😘2😒1🫑1
Lots of discussion online today about two actions performed by United States President Donald J. Trump which are expected to heavily impact the Cybersecurity and Information Technology ecosystem.

There is a shit load of yappin' online about the executive order titled, "Gold Visa" and Presidential Proclamation titled, "Restriction of Entry of Certain Nonimmigrant Workers".

Both the executive order and Presidential Proclamation were signed September 19th, 2025.

Both the executive order and Presidential Proclamation are kind of lengthy.

The non-head line grabbing summaries that aren't AI slop:

"Gold Visa" tl;dr
- Says United States immigration policy sucks
- Says immigrants hurt America
- Gift America $1,000,000 to get an expedited visa
- Companies can gift on someones behalf
- Companies must gift $2,000,000 for someone
- Still subject to background checks
- Non-refundable
- Money will be used to improve American stuff
- Goes into effect in 90 days

"Restriction of Entry of Certain Nonimmigrant Workers" tl;dr
- Says companies abuse H1B
- Says tech companies exploit H1B workers
- Says H1B fucks over American STEM nerds
- Specifically says H1B fucks computer nerds
- Says over 30% of IT is H1B
- Says H1B IT fucks over college kids looking for jobs
- Says H1B replacing Americans because cheaper
- Says H1B is a threat to National Security
- Going to charge for H1Bs now
- H1B charging fees start September 21st, 2025
- $100,000 per H1B employee per year
- Hired H1Bs must be explained why they need them
- H1Bs are subject to more background checks
- H1Bs can be denied for any reason

This proclamation is expected to be catastrophic to large IT companies such as Amazon, Infosys, Cognizant, Google, Meta, Microsoft, and Apple

If these companies fully comply with the Presidential Proclamation (not terminate H1Bs, keep them), these companies will be paying the following amounts of money PER YEAR to keep their H1B employees

Amazon: $930,000,000
Infosys: $810,000,000
Cognizant: $630,000,000
Google: $540,000,000
Meta: $480,000,000
Microsoft: $470,000,000
Apple: $390,000,000

In other words, the top IT companies will end up paying $4,250,000,000 annually for H1B workers... or fire them and replace them with Americans.
πŸ€“42πŸ”₯30🀣26❀10😒6πŸ‘4😱4🀯2πŸŽ‰2😁1
πŸ₯°91πŸ’―15😁12🀣9πŸ€”4❀1πŸ‘1πŸ”₯1😱1😒1πŸ€“1
😱44❀14🀣14πŸ₯°6πŸ”₯4😁1😒1
My internet connectivity has been absolute dog ass for years. I've been using this old ass fuck off modem and router combo. It was like, 10 years old.

I went to the local poopy pants store (computer store) and purchased this stupid expensive modem router combo thingy that looks like its from the year 3035

Dawg, I'm getting 2Gbps down 😭

Before I was getting 25 Mbps down (if I was lucky). I never even questioned why my connection was so slow despite paying so much money. I was too focused on cat pictures and malware to think good

tl;dr im dumb as hell
😁82🀯22πŸ€”8πŸ”₯5❀4πŸŽ‰1
Updates:

- Malware Analysis section expanded for 2025
- Papers section expanded
- New categories for papers added
- 100,000+- malware samples uploaded

New papers:
- 2025-09-18 - More Fun With WMI
- 2025-07-16 - Under the Hood of AFD.sys Part 1
- 2021-01-25 - Advanced obfuscation with LLVM and template metaprogramming
❀34πŸ”₯9πŸ₯°5😱1😒1πŸ™1
As is tradition, 4chan is doing some trolling.

They've launched "Operation Clogged Toilet".

They're intentionally reserving flights (prior to payment confirmation) from places such as India to the United States to prevent potential H1B holders to return to the United States
🀣144πŸ”₯21😒14❀8πŸ€”4😁2πŸ₯°1🀩1
This media is not supported in your browser
VIEW IN TELEGRAM
I lied. I didn't add 100,000 malwares yesterday. I added 325,000 malwares yesterday.
πŸ”₯85❀‍πŸ”₯18❀9πŸ₯°6😱5πŸ€“4😁3😘2😒1
wtf why do cats need context
❀96🀣46πŸ’―8πŸ”₯4πŸ₯°4πŸ‘1πŸ€”1😒1
Hello,

2,000 kitty cat pictures have been added to the kitty cat picture collection. Please look at them. It is very important.

./Archive/Cat Picture Collection
https://vx-underground.org/
πŸ₯°80❀25πŸ‘7πŸ”₯2😒1
This media is not supported in your browser
VIEW IN TELEGRAM
Yesterday a video game streamer named RastalandTV inadvertently livestreamed themselves being a victim of a cryptodraining campaign.

This particular spearphishing campaign is extraordinarily heinous because RastaLand is suffering from Stage-4 Sarcoma and is actively seeking donations for their cancer treatment. They lost $30,000 of the money which was designated for their cancer treatment. In the steam clip their friend tries to console them while they cry out, "I am broken now."

They were contacted by an unknown person who requested they play their video game demo (downloadable from Steam). In exchange for RastaLand playing their video game demo on stream, they would financially compensate them.

Unfortunately, the Steam game was actually a cryptodrainer masquerading as a legitimate video game.
😒164😱19❀11😁4🀣4πŸŽ‰2🫑1
Previously we made a post about a cancer patient being a victim of a malicious Steam game. It is a cryptodrainer masquerading as a free-to-play video game.

Based on reports and conversations occurring online, this is the malicious video game:

https://store.steampowered.com/app/3872350/BlockBlasters/
❀22😁9πŸ₯°4😒1
vx-underground
Previously we made a post about a cancer patient being a victim of a malicious Steam game. It is a cryptodrainer masquerading as a free-to-play video game. Based on reports and conversations occurring online, this is the malicious video game: https://st…
However, it is important that I note that I have not personally reviewed the game yet to determine if this is actually malware. This is what the victims allege or believe to be the culprit.
🫑35❀9😁6πŸ€”2😒1