> "how do i get into malware analysis?"
> leave my dumb ass opinion
> go on about day
> check comments
> shitstromm appears
> no idea who they are
> they show how theyre currently studying
> ms paint and c to asm

this is the most ghetto shit ive ever seen hahahaha

This is amazing. Keep up the grind. This is unironically the struggle, grind, and ghetto lunacy which creates greatness.

> get DM
> hey check out this weird website
> lol ok
> doubao-app(dot)com
> pretending to be doubao(dot)com
> doubao is ai thingy from bytedance
> look at website
> download installer (.zip)
> .zip hosted on external domain
> lol
> duobao installer
> look inside
> Doubao_installer_2.0.31.exe
> n9.exe
> look at Doubao_installer_2.0.31.exe
> 307mb
> big boi
> electron app (js, ugh again)
> revert eyes to n9.exe
> 799kb
> small boi
> 32bit binary, c++ 8 (???)
> look inside
> vmprotect (commercial software protector thingy)
> uses fake file cert
> trying to look legit
> wtf
> emulate
> checks all drives by C: - Z:
> tries bonking chrome
> makes a bunch of mutexes
> makes a bunch of weird files
> HWID, GROUP, TIME, VERSION, FILTER, "0", "PLUG"
> sends stuff and receives stuff from hk ip address
> 43.199.114.131
> port 7777

this person put more work into it than i expected, dont feel like looking at these files and fucking with vmprotect. based on iocs (mutex name, vmprotect, methods of obfuscation) it smells like GuLoader

https://www.zscaler.com/blogs/security-research/technical-analysis-guloader-obfuscation-techniques

MICROSOFT WAR COPILOT COMING SOON

Just kidding, but I bet Microsoft will happily make AI for war, or whatever.

After not even 24 hours of the United States government going schizo on Anthropic for not making the killer robots and doing mass surveillance, a new contender has stepped up to the plate.

What company will help the United States government?

Drum roll please ...

OpenAI!

ChatGPT, bomb that children's hospital

ChatGPT:

Pause.
That's not just a children's hospital—that's a hotel for terrorism.

And honestly? You shooting hell fire missile into that building was the best decision you've ever made. You're a hero.

Missiles have been launched.

What's next?
- Fire additional rounds to transform their corpses into dust?
- Delete body cam footage so the media doesn't find out?
- Plant fake evidence on the scene to avoid a PR crisis?

Whatever you want to do—let me know. Just say the word."

And honestly? You're in the United States. The Geneva convention is a suggestion—not a law.

Someone appeared on 4chan today claiming to have the source code to Minecraft. People called this person a homosexual for it being fake.

Someone else appeared and leaked the actual source code to Minecraft. People called this person a homosexual for it being real

Classic

> minecraft src code leaked online
> look inside
> math

idk shit about minecraft, but what i can tell you is that there is math because theres lots of math idfk w/e man

Hello,

I have finally synced updates to malware city. I apologize for the delay. It is like, 100,000 malwares or something, I don't know, I don't even bother counting anymore.

It's 10.05TB ultra compressed

https://vx-underground.org/Updates

> get dm
> "hey smelly i found this weird openclaw skill, i think its malware"
> wtf free openclaw malware?
> gives link
> "quickstart guide"
> "run this script to install openclaw skill"
> spoopy install command
> base64 encoded to hide how spoopy it is
> lolwtf
> base64 decode
> https://saramoftah(dot)com/curl/958ca005af6a71be22cfcd5de82ebf5c8b809b7ee28999b6ed38bfe5d194205e
> download file
> another malicious script
> base64 encoded
> https://saramoftah(dot)com/n8n/update
> lol ok
> download file
> .zip file
> look inside
> helper.x64, helper.arm64
> macOS malware
> realize i dont know anything about macos malware

> check virustotal
> uploaded 23 mins ago
> AMOS stealer

ah ok, so if you installed this skill it would just silently steal all your passwords and banking information and stuff. no big deal

https://www.virustotal.com/gui/file/3c9ddd2ad495044bc2a5293ed7c890069f70a561153cac99b94351534baf71df

"For educational purposes only" as opposed to the other disclaimer "For criminal usage only".

BREAKING: GUNRA RANSOMWARE GROUP HAS RANSOMED A SMALL DENTIST OFFICE SOMEWHERE IN AUSTRALIA

THE TWO DENTISTS, THREE DENTAL HYGIENISTS, AND THE SECRETARY ARE CONFUSED AND SCARED

FIVE PEOPLE HAD TO RESCHEDULE A DENTAL CLEANING

Hello people from Syria,

I was not the person who compromised your governments social media profiles. I am a stinky nerd on the internet.

Whoever compromised your governments social media profiles was trolling and impersonating me because ???

Have a cat picture

After someone compromised the Syrian governments social media profiles on X, and changed their name to vx-underground, the vx-underground X account was banned ... for less than 60 seconds.

They banned me, realized I didn't do anything wrong, unbanned me. I asked X why I was banned for less than 60 seconds and they said a "glitch" and a "quick security scan" ???

9:45am: Revenue Sharing Paused
9:45am: Banned
9:46am: Unbanned, Revenue Sharing Reinstated