vx-underground
51.5K subscribers
4.51K photos
489 videos
84 files
1.57K links
The largest collection of malware source, samples, and papers on the internet.

Password: infected

https://vx-underground.org/
Download Telegram
This media is not supported in your browser
VIEW IN TELEGRAM
If you're at DEFCON this year, there will be vx-underground wrist bands distributed for free.

Yes, this is an ADVERTISEMENT.

Oh, and by the way, these wrist bands were created by the CIA, FBI, NSA and, IRS. They contain a tracking beacon that activates when you fart
❀141πŸ”₯17😱11😁7❀‍πŸ”₯6🀣6πŸ‘4🫑4😒3
vx-underground
If you're at DEFCON this year, there will be vx-underground wrist bands distributed for free. Yes, this is an ADVERTISEMENT. Oh, and by the way, these wrist bands were created by the CIA, FBI, NSA and, IRS. They contain a tracking beacon that activates when…
Better hold those farts in buddy, the government is after you. That gas station burrito you purchased? The gas station clerk? He's in the CIA. It's Operation Ass Blast
🀣101❀12😱7🫑6😒4❀‍πŸ”₯1πŸ™1
Luther Squarepants,

I don't possess the wrist-bands, h3l3n 0f t0r does. I will ask her if she is willing to mail you CIA monitoring technology to your home

This was a very strange DM, but I respect it
❀117🀣21πŸ”₯15❀‍πŸ”₯4🀩4😁1😒1πŸ€“1
vx-underground
Luther Squarepants, I don't possess the wrist-bands, h3l3n 0f t0r does. I will ask her if she is willing to mail you CIA monitoring technology to your home This was a very strange DM, but I respect it
This image is double-silly because it features the FUCKING PIECE OF SHIT COPY-MENU WINDOWS 11 WONT KILL.

IM NOT GOING TO RESTART MY COMPUTER. FUCK YOU MICROSOFT
🀣102❀14😒3πŸ”₯2❀‍πŸ”₯1
> be me
> get message from TorGuard owner
> "i found goop" (malware)
> wtf let me see goop (malware)
> sends link
> look inside
> "width-table v0.1.0"
> malicious rust crate
> imported into "Polymarket-5min-bot"
> by "crazygirl437" on GitHub
> code walks directory and uploads files to website
> "checkenv(.)cloud"
> lol its for a rust crate that sets a table width
> image 1
> neat
> hmmmm
> beep boop search
> find X posts
> malware campaign on X
> verified accounts sending link to people
> "crazygirl437/hyper-grid"
> image 2
> more verified accounts posting stuff
> lots of impressions and likes
> image 3

Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4).

Although, it is primarily social engineering work. It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer.

tl;dr free goop for everyone
❀84πŸŽ‰24❀‍πŸ”₯2πŸ”₯1😒1
Shoutout to @recogard and @eugenepage_ for the malware campaign. Your campaign has been undetected for a month, that's pretty good
❀56πŸ˜‡9πŸ‘4😁4❀‍πŸ”₯3πŸ”₯2😒1
Some lady at DEFCON will be sporting vx-underground UWU nails.

What does this mean? I don't know, but I thought it was cool and badass. I wanted to share it.
❀129πŸ₯°30πŸ”₯18😎9πŸ€”4πŸ€“3❀‍πŸ”₯1πŸ‘1😁1😒1🀝1
> post photo of girl nails
> IS SHE HOT?
> ARE THEY TRANS?

why cant you people be normal for at least one post
❀145🀣97πŸ’―32πŸ˜‡14😒11😁5πŸ€“5πŸ€”4πŸ”₯3❀‍πŸ”₯2πŸŽ‰1
This media is not supported in your browser
VIEW IN TELEGRAM
Some guy named Dulgex just made this for me and I'm so happy omg this is awesome thank you so much bro
❀148😁32πŸ”₯13❀‍πŸ”₯9πŸ€“6πŸ₯°4πŸ€”3πŸ‘1😒1
Hello,

So uh, a long time ago I said I was giving away tickets to DEFCON for free. A lot of people have DM'd me about it.

I can't go into too much detail about. I don't want to diss anyone, or throw shade at anyone, because I myself don't even know what the fuck happened. But, we had the money for tickets to DEFCON. We had sponsorship money. We had all the goop ready to go.

However, for reasons I don't understand, certain people, or peoples, or individuals, or whatever, were unable to effectively communicate with us and we weren't able to do the stuff we needed to do to give away free tickets.

We ended up refunding the money to the sponsors who gave us money for DEFCON tickets. I don't know, bro.

We'll try again next year, I guess
😒99❀22🀣8🫑7πŸ€“2πŸŽ‰1
vx-underground
Hello, So uh, a long time ago I said I was giving away tickets to DEFCON for free. A lot of people have DM'd me about it. I can't go into too much detail about. I don't want to diss anyone, or throw shade at anyone, because I myself don't even know what…
I really don't want to throw shade at anyone, but it's super confusing, because we had a giant pile of cash from sponsors. We said, "Hello, we would like to use this giant pile of cash". They pretty much said, "Okay, cool, one moment" ... then kind of radio silence.

I assume DEFCON likes money, so I don't know what happened.
😒64❀9🀣7😱1πŸŽ‰1
> get dm
> "smelly, is this goop?" (malware)
> "i found it on x"
> links GitHub
> download
> look inside
> .net goop
> didnt strip metadata
> internally refers to itself as FunkyStar
> internally does "ProcessAlpha", "ProcessBeta", etc

Not only is this shit slop malware, the author of this malware is larping to themselves as like, some sort of military operation. My brother in Christ, I'm happy you're feeling peppy about your slop malware, but you ARE NOT writing state-sponsored malware.
😁86🀣23πŸ₯°8❀6😒2πŸ”₯1
I like writing malware because, instead of making useful and productive software, you spend an absurd amount of time writing a really over complicated and convoluted way to create a file.

A simple line or two of code becomes like 50 lines.

It's fun, I don't know why
❀82πŸ₯°32πŸ’―10😒1
This media is not supported in your browser
VIEW IN TELEGRAM
> get dm
> "someone defaced health institute for czech republic"
> look at website
> indeed they did
> they leave a telegram handle
> dm them
> say hello
> "haha check this out bro"
> adds "smelly" to website
> lists "smelly" as a "crew member"

chat, we are cooked
😁154🀣114🫑17πŸ₯°6😒5❀4πŸŽ‰3πŸ”₯1
vx-underground
> get dm > "someone defaced health institute for czech republic" > look at website > indeed they did > they leave a telegram handle > dm them > say hello > "haha check this out bro" > adds "smelly" to website > lists "smelly" as a "crew member" chat, we are…
o ok, thank god they removed it, i was afraid the knedliky police were gonna come to my house and beat me to death with knedliky

close one
❀103🀣43πŸ₯°13😁8😒4πŸŽ‰3
Oh yeah? You're a "hacker"? Prove it.

Show me your $600 entry ticket for Slermie Doop 16 and massive collection of cybersecurity vendor merchandise you either received for free or purchased.

You're not a real hacker until you're a walking billboard for tech companies
🀣87❀24😁8😒4πŸ€“2❀‍πŸ”₯1πŸ’―1