vx-underground
45.4K subscribers
3.9K photos
413 videos
83 files
1.42K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
vx-underground
Dawg, this Discord Zendesk compromise is crazy. The Threat Actor has so much fucking leverage Depending on what's in the data they could extort celebrities, crypto influencers, politicians, scammers and/or other Threat Actors, government officials The possibilities…
Anyway, Discord better lock the fuck in because I guarantee someone, somewhere, is going to go fucking apeshit and try to swing a class action lawsuit
❀58πŸ”₯14😁9πŸ’―3😒1😘1
Oops, was memeing and accidentally did misinformation on the internet.

Discord Zendesk (3rd party support software) was compromised, if someone was flagged as being potentially underage a ticket would be created and the user would have to appeal to Discord support proving they're sufficiently aged to be on Discord. This would mean they have would have to submit government identification such as drivers license, passport, etc.

When I made the post (in the attached image) it was part of a series of posts discussing the Discord Zendesk compromise. People viewed the post without seeing the chain of other posts and mistook the context of it. It caused people to believe the actual Discord age verification feature was compromised but IT WAS NOT.

tl;dr ppl only saw 1 post out of chain of posts, caused confusion
πŸ€“51πŸŽ‰13❀8πŸ₯°5πŸ‘1😒1🀩1πŸ˜‡1
This media is not supported in your browser
VIEW IN TELEGRAM
The vx-underground admin Discord account received a Discord 3rd party breach notification.

I thought this was unusual because this account has nothing of value on it. It uses a generic vx-underground e-mail, it doesn't have access to anything, it doesn't have a credit card or any sort of government identification on file.

Then I discovered someone (or someones?) submitted 255,620 complaints on the account trying to get it banned.

This is strange because this account, as stated previously, literally have NOTHING of value on it. NOTHING. It is just a way for people to contact us.

Look at this fuckin' e-mail bro, it was almost 1MB in size.
🀣139πŸ₯°12❀5😁4😱1πŸŽ‰1
The Discord Zendesk was not compromised by SLSH. I've received incontrovertible evidence displaying it was not SLSH.

SLSH compromised Salesforce. They have overlapping TTPs with the Discord Zendesk compromise. But it is not them.

The group who compromised Discord Zendesk currently does not have an attributed Threat Group name.

I'm absolutely flabbergasted right now.
🀯60🀣28❀4😁4πŸ‘3😱2😒1
What a wonderful couple of days

First, on Thursday, an unknown person begins sharing photos of Discord Okta stuff. Images begin circulating. I first saw the images around 3pm EST. Some people speculated it was SLSH. SLSH took credit for something Discord related, I don't know.

Friday Discord did a press release disclosing a 3rd party compromise from (presumably) Zendesk. They began sending emails out.

Friday night people began attributing the Zendesk compromise to SLSH. Various posts were made on social media about it. The prevailing theory was overlapping TTPs from the SLSH attributed Salesforce campaign.

Saturday evening an unknown group officially took credit for the Discord Zendesk compromise disproving the attribution to SLSH.

Saturday night, SLSH retorted that they had never explicitly took credit for the Discord Zendesk compromise, hence they are not distributing misinformation, rather Cyber Threat Intelligence nerds on social media falsely attributed it and SLSH never explicitly confirmed or denied it. They took offense to me writing this weaponize misinformation.

Who really compromised Zendesk? Why didn't SLSH deny the allegations up front? Will One Punch Man season 3 have as good animation as season 1? Why does Friendlies have such good mozzarella sticks? Will I wait for the internet nerd drama to conclude before I make a post or just let chaos flow in perpetuity?

Find out next time on Dragon Ball Z
🀣71πŸ”₯8❀7😁6πŸ€”1😒1πŸ€“1
PetrP.73 and cryptocti on OTX AlienVault are my fucking heroes. I love them so much.
🀣30❀10❀‍πŸ”₯4🫑2πŸ₯°1πŸ€”1😒1
"05 October 2025 will become national cybercrime day, stay tuned" β€” Crimson Collective

What is this cryptic message? Is this a threat? Will it be a serious problem? Do they realize today is October 5th? Do they realize it's Sunday?

Find out next time on Dragon Ball GT
❀47😁31🀯9😱2πŸ₯°1πŸ€”1😒1😎1
thank you, small child, for the lovely artwork. it's beautiful
❀145πŸ₯°47❀‍πŸ”₯14πŸ”₯8🀣4😁2πŸ€”1😒1
This media is not supported in your browser
VIEW IN TELEGRAM
chat, its been another lovely week of internet schizophrenia. please enjoy this cute video of this kitty cat
❀70πŸ₯°21πŸ”₯4😁1😱1😒1😍1πŸ€“1πŸ˜‡1
vx-underground
chat, its been another lovely week of internet schizophrenia. please enjoy this cute video of this kitty cat
By the way, I've been pushing on average 10+ papers a day to the library. I've been noting them in the VX Feed Discord (it has over 6,000 people idling doing nothing).

Have a nice day, a great Sunday, and ANOTHER cat picture
❀59😘9πŸ”₯6😱2😒2🫑1
vx-underground
"05 October 2025 will become national cybercrime day, stay tuned" β€” Crimson Collective What is this cryptic message? Is this a threat? Will it be a serious problem? Do they realize today is October 5th? Do they realize it's Sunday? Find out next time on…
Episode spoiler: Crimson Collective posted RedHat leaks on the new Breach forum (can't remember the name, it's the 4th iteration, I think).

They also alluded to SLSH by commenting they're shiny, or maybe I'm losing my mind, I dunno.

Haven't looked at the leaked files yet, that's some Monday ass shit
❀29🀣15πŸ”₯6πŸ₯°1😒1πŸ’―1
Went to GameStop and the lady behind the counter advised against using a credit card to pay for Xbox Live. Said she hackers can steal your information

I wasn't sure if I wanted to kill myself or kill her (the governments shutdown, it's legal)
🀣95πŸ”₯14❀4😁2πŸ‘1πŸ€”1😒1πŸ’―1
vx-underground
Went to GameStop and the lady behind the counter advised against using a credit card to pay for Xbox Live. Said she hackers can steal your information I wasn't sure if I wanted to kill myself or kill her (the governments shutdown, it's legal)
I shot her 3 times in the chest point blank with my Kamehameha blast. I learned it from Master Roshi. She'll never give me bad advice EVER again
πŸ”₯58🀣21❀6😱5πŸ‘2πŸ₯°1😒1
❀72🀣50πŸ‘10πŸ”₯7πŸ₯°4😱1😒1🫑1
This media is not supported in your browser
VIEW IN TELEGRAM
Uploading malware to the internet
πŸ€“41🀣18❀14πŸ‘4πŸ₯°4πŸ€”1😒1🀩1
vx-underground
Uploading malware to the internet
Literally only uploaded this video because I wanted to show love to German homies. I love them
❀54πŸ”₯9πŸ₯°5🀯4πŸ‘1😒1🀣1
🀣128❀19πŸ₯°7πŸ”₯1😒1
Meaningless update:

Previously on Dragon Ball Z, I made an egg, ham, and cheese sandwich. I put a drop of MadDog 357 on it. I rubbed my eye while eating and got a boo boo. Super mega fuck off hot sauce juices got in eye.

I subsequently used ChatGPT for medical assistance (it's basically a doctor).

After rinsing eye with lukewarm water I feel much better. It took about 10 mins.

After this ordeal I can assert with a high degree of confidence if I were to get pepper sprayed I would be incapacitated.

You can't see a god damn thing bro. Your eyes get all twitchy and your wife starts yelling, "are you fuckin serious right now? You were supposed to help me with the baby, now you're saying you can't see and just sending cats to people on Telegram with 1 eye closed"

-2/10
🀣114😒11πŸ‘9❀8❀‍πŸ”₯2πŸ€”1πŸŽ‰1πŸ’―1
vx-underground
Meaningless update: Previously on Dragon Ball Z, I made an egg, ham, and cheese sandwich. I put a drop of MadDog 357 on it. I rubbed my eye while eating and got a boo boo. Super mega fuck off hot sauce juices got in eye. I subsequently used ChatGPT for medical…
Still not sure why I'm sharing this. I don't expect any of you to give a shit. However, I've never had a hot sauce boo boo before and I was genuinely shocked by how much it hurt my soft little eye balls.

Thanks for experiencing stuff with me
❀69🀣21πŸ”₯9🫑7πŸ‘5❀‍πŸ”₯4πŸŽ‰1
Me listening to malware talks
πŸ”₯59❀23πŸ₯°8😍5❀‍πŸ”₯1πŸ‘1πŸŽ‰1