vx-underground
50.3K subscribers
4.41K photos
479 videos
84 files
1.55K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
Someone DMd me something they received on Discord. They thought it could potentially be malware.

It was malware.

However, it was Electron JS AI slop malware. You can tell because it was easily disassembled and the AI notes were present.

I'm so god damn tired of malware slop
🤣15510😁5🔥4💯3🥰2😢1
vx-underground
Someone DMd me something they received on Discord. They thought it could potentially be malware. It was malware. However, it was Electron JS AI slop malware. You can tell because it was easily disassembled and the AI notes were present. I'm so god damn…
Interesting, it was undetected virtually everywhere. It was also undetected in a sandbox because it's a bloated piece of shit and has too many dependencies.

The only AVs that detected it from static analysis was Rise and MalwareBytes
🤔106😁266🔥3😢1
Just cancelled my Codex Claude Slop subscription.

I'm running my own AI thingie at home. It'll be cheaper in the long run, it just required a few hardware purchases.
🤣21226🔥13🥰5😘2👍1👏1😢1🤝1
It's Father's Day this weekend.

My wife asked what I wanted and the answer was shrimple.

I want to lay in bed and not move for 24 hours. I will only move to urinate, or defecate, or consume the fast food slop I have delivered from Uber Eats.

Let me rot in peace for 1 day.
🥰158😁47🫡38💯1811🔥7👍5😢5🤝4❤‍🔥2😘1
101🤓31😁15🤔7💯7🤣5🔥4🤯3😢1
Dawg, I don't want to sound like a hater, but some of you malware nerds NEED to lock in and TRY HARDER.

Someone found a malicious GitHub repo and DM'd it to me. It had piss poor obfuscation (if you even want to call it that, it's Base64 encoding) and the malware C2 is basically plain text.

The delivery method is masquerading as an Adobe Acrobat plugin? My Brother in Christ, WHAT ARE YOU DOING

The C2 is literally houndsregimeskid-dot-com

Hounds Regime Skid? Hounds Regimes Kid?

Also, for the record, if the people who wrote this malware are reading this: I'm not the guy spamming your Telegram C2. That is someone else. You left all of Telegram channel stuff plain text too
🤣112🥰96😢1
Image 1. Website with uBlock Origin on
Image 2. Website with uBlock Origin off

uBlock Origin IS PREVENTING US FROM FREE MALWARE
🤣162🥰149😢7😱6👍1🤔1
vx-underground
Image 1. Website with uBlock Origin on Image 2. Website with uBlock Origin off uBlock Origin IS PREVENTING US FROM FREE MALWARE
I'm torn mentally, physically, and maybe a little bit sexually.

I hate advertisements. On the other hands, I like malware. I don't know what to do. I am forsaken.
73🤣22😍5🤔4😢4🥰3💯2👏1
> be me
> "smelly is this malware?"
> download file
> file.exe
> click to rename file
> accidentally hit enter
> detonate malware on personal pc

chat, ive accidentally detonated an information stealer on my pc. brb
🤣218😱1712🥰7🎉4😁3😢2❤‍🔥1
vx-underground
> be me > "smelly is this malware?" > download file > file.exe > click to rename file > accidentally hit enter > detonate malware on personal pc chat, ive accidentally detonated an information stealer on my pc. brb
What do I do in this scenario?

1. Disconnect from internet
2. Sigh, take a huge rip off my vape
3. Blame the keyboard, not me.
4. Remove the .exe, any persistence mechanism on my machine
5. Angrily reset all my passwords
6. Refuse to use a VM in the future, I'm not a coward
🤣173🙏1914🥰9💯6😁3😘3❤‍🔥2👏1😢1
I guess the only thing more embarrassing than accidentally detonating an information stealer payload on your computer, while trying to remove the .exe file extension, is reviewing the payload closer and seeing it comes with cartoon pornography (I've censored it) and an image of a random woman
🤣164😢12🤔107🤯7🔥4🥰3😱2😇2👍1😍1
"Why are you reverse engineering malware on your main PC? Why don't you use a VM? If you used a VM you wouldn't have infected yourself"
🤣135🥰11😁11💯82❤‍🔥1🔥1😢1
vx-underground
"Why are you reverse engineering malware on your main PC? Why don't you use a VM? If you used a VM you wouldn't have infected yourself"
Okay, the silly shenanigans are over. I've repaired the damage done to my box. Overall this was a very whimsical Saturday.

For people new to this account:
Do I really not use a VM when doing malware analysis? Yes. I have a VM, but I don't know, I get lazy. I throw the malware in a random directory called like, "sgsdggggg" (I type random letters on the keyboard) and start poking it.

Is this the first time I've detonated malware on my computer? No. I've detonated ransomware (REvil), some suspected state-sponsored malware from the Russian government (APT28), a crypto-miner, and now this.

I also once messed up an rsync command and synced my tax documents to the staff at DEFCON. They expected malware, instead they got my birth certificate, my tax returns, and some other various documents.

Do I panic? No, I deal with malware every single day. I collect malware, reverse engineer malware, write malware, etc. It is more annoying than actually concerning. The only time I was genuinely concerned was when I detonated REvil because I usually don't make backups (I'm not a coward).

Basically, I'm a jackass who has gotten way too comfortable with malware and you should not do what I do.
🤣16725🤓12💯8❤‍🔥3👏2🤔2👍1😢1🙏1
I get so many DMs, emails, and comments on social media of people calling me a cat

It's some sort of deep state psyop by silly cat picture to make me a furry

It's not going to work. Stop calling me a cat and stop asking me to meow you goobers
🥰116😁25😎76💯6🔥1😢1🤣1
vx-underground
Video
I know you expected a post about malware, or something, but I've been battling demons (trying to get a baby to sleep) and I've got nothing.

I did however find this video to be cute and silly, so I decided to share it
87🥰25🙏12👍5🤣5😁4🤝2😢1
The best thing about being a Dad is that now I can dress like Dad

I just purchased several pairs of cargo shorts and button up shirts I intend on tucking in.
122😁41👍8🤣6❤‍🔥4🥰4🎉4🔥3😢3👏2🫡1
GTV VI leaks reportedly show the pricing for the game at $25,999

Gamers can take out a loan from Rockstar Games official banking app, or get a 2% discount if they pay in full at checkout

They have options available if you have no credit or poor credit
😁160🤣6319🔥9🤝4😱3👍2🥰2🤩2😢1