Sign in

vx-underground (automated mirror)

@vxundergroundre.bsky.social
7K followers 1 following 1.7K posts

The largest collection of malware source code, samples, and papers on the internet. Password: infected (unofficial, this is a bot! Maintained by a private individual, the bot can't handle retweets or replies, support soonish)

PostsRepliesMedia
vx-underground (automated mirror) @vxundergroundre.bsky.social · 17/04/2026
Jjaemu will never get mad ever again.
0121
vx-underground (automated mirror) @vxundergroundre.bsky.social · 17/04/2026
> popular browser game in japan > brush kitty cat > wtf i love it > play game > lose > get mad > look inside > html iframe > loads index.pck > gdpc header > realize im reverse engineering html game > html game for brushing kitty cat im a loser dawg fr lmfao
1322
vx-underground (automated mirror) @vxundergroundre.bsky.social · 17/04/2026
2273
vx-underground (automated mirror) @vxundergroundre.bsky.social · 17/04/2026
What's it like being a malware researcher? Here is my day. 09:30am: wake up (depends on how bad sleep is) 10:00am: drink energy drink, check news 10:30am: check MISP, see world imploding 11:30am: read random papers from MISP 12:30pm: continue malware research project, chug energy
1170
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
Hello, One of my colleagues is looking for a job. She is a smart lady. She is searching for a job doing one of the following: - SecOps Leadership - IR Leadership - SOC Leadership - Security Awareness Leadership - CTI Please let me know if you anyone is hiring. Thanks.
0218
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
Hello, One of my colleagues is looking for a job. She is a smart lady. Unfortunately, she does not do malware stuff (no idea why), she is searching for a job doing one of the following: - SecOps Leadership - IR Leadership - SOC Leadership - Security Awareness Leadership - CTI What do
191
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
The fundamental problem with this "hack" is it requires three things being true. 1. An attacker must possess the device 2. An attacker must be able to unlock the cell phone 3. The cell phone must be "rooted", all additional cell phone security already bypassed In the event all three of
170
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
Big drama in the EU today. I'm not a mobile device security nerd, so I can't comment too much. However, it seems extremely odd all configurations (including the "encrypted pin") are stored in a .xml file. Mobile nerds, ... is this standard practice? Or did the EU make an incredibly poor
193
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
Another zero day exploit released by some nerd (can't remember name right now) because they're annoyed with Microsoft. It's been confirmed by other nerds. It is yet another legit zero day. Whew.
1110
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
Yeah, so basically I'm trying to make my own "ClickFix" but for Windows binaries by abusing the Windows Runtime, Component Object Model, and whatever Windows grants me from a limited user profile (see attached image) I saw some research on Windows Toast Notifications by @ipurple, but
190
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
Say what you want about TeamPCP, but they have certainly made attribution much easier. I can't recall a time a Threat Group specified the malware campaign and malware delivery mechanism that resulted in a compromise. Is TeamPCP lying about how how they compromised these organizations?
280
vx-underground (automated mirror) @vxundergroundre.bsky.social · 16/04/2026
Day Two of working on really silly malware proof-of-concept. Is there an easier way to write this code? Yes. Is it worth investing this much effort into? Probably not, no Is it a lot of fun bonking Windows with a stick and reading obscure documentation? Yes Am I a cat? No
1131
vx-underground (automated mirror) @vxundergroundre.bsky.social · 15/04/2026
A long, long, long time ago I read a paper on how the United States Central Intelligence Agency intentionally introduced conflict, distrust, and resentment into the inner circle of Julian Assange. Being unable to physically touch him, they had hoped if they made his life chaotic enough
1132
vx-underground (automated mirror) @vxundergroundre.bsky.social · 15/04/2026
Claude 🤝Persona
061
vx-underground (automated mirror) @vxundergroundre.bsky.social · 15/04/2026
Oh yeah? You're a "hacker"? Prove it. Send a stool sample and a copy of your Birth Certificate to Sam Altman.
1130
vx-underground (automated mirror) @vxundergroundre.bsky.social · 15/04/2026
I was pretty busy today. From what I saw when skimming the internet: - More AI hot takes - More laws about age verification - Arguments about age verification - Some cool new malware found - Drama about fake ledger in Apple Store - PUBG CEO used ChatGPT for business advice - More
1122
vx-underground (automated mirror) @vxundergroundre.bsky.social · 14/04/2026
Working on some real silly code. Is it special? No. Is it silly? Yes, extremely.
0180
vx-underground (automated mirror) @vxundergroundre.bsky.social · 14/04/2026
> ramp up cyber defenses > look inside > change password to include ! > pay for nord vpn (protects from hackers) > re-up norton antivirus subscription > ask 7 year old nephew for help with ipad we are cybersecurityied now dawg
2234
vx-underground (automated mirror) @vxundergroundre.bsky.social · 14/04/2026
It appears I have made a series of mistakes when reviewing some of the financial data from RockStar Games. What does this mean? I've spread misinformation and I will be burned at the stake by gamers. It was nice knowing all of you
0192
vx-underground (automated mirror) @vxundergroundre.bsky.social · 14/04/2026
BREAKING: New intelligence from the United States Department of War suggest cars go all like VRRROOOOOM, SKRRRT, and PFFFTBLOOOOSH. Donald Trump is being briefed on the situation now.
0111
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
Final post about the RockStar Games compromise because (as I have now learned) there are a lot of people who are extremely passionate about RockStar Games. ShinyHunters extortion group successfully compromised RockStar Games through a third-party vendor called "Anodot". Anodot is used
1101
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
Sweet baby Jesus, the RockStar Games nerds are going spazzo online. I'm not a RockStar Game nerd, I don't really care about GTA V or GTA V Online, but because nerds won't shut up: First documented sale: DATE: 2014-11-12 PLATFORM: Xbox One REGION: Asia E: BULL TOTAL: $9.99 Last updated
151
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
ShinyHunters leaked the RockStar Games data. The data isn't anything special. There is no PII or source code. The data is primarily financial metrics. This may come as a surprise to some of you, but based off of this data, it appears RockStar Games makes a FUCK TON of money
1122
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
Over 200 media outlets are blocking Internet Archive. Media outlets say because AI, or something, but also (and TOTALLY UNRELATED) since they're blocking Internet Archive there is no way to tell if the government or media outlet has deleted or change something. However, they say this is
1145
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
This is very good malware. This is solid-solid-SOLID B+ malware, very close to A- malware. APT37 is using a old-school playbook. They're doing EPO (Entry Point Obfuscation) on a self-delivered binary for evasion. They also unironically are using something akin to cavity infection ...
180
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
Hi I've added another 550,000+ malwares to the malware library. Please download the malware and share it with your friends and family.
0101
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
1 year olds are far more exhausting than 6 month olds. Parents warned me. They were correct. Bro HAS to put ALL FOOD on his head. - Beans - Soup - Mac and Cheese - Strawberries - Blueberries If he doesn't rub it on his head, or eat it, he throws it on the floor. I'm tired.
2160
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
"what's it like working in cybersecurity?"
1133
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
1 year olds are far more exhausting than 6 month olds. Parents warned me. They were correct. Bro HAS to put ALL FOOD on his head. - Beans - Soup - Mac and Cheese - Strawberries - Blueberries If he doesn't rub it on his head, or eat it, he throws it on the floor. I'm tired.
1120
vx-underground (automated mirror) @vxundergroundre.bsky.social · 13/04/2026
THE CIA USED WHAT TO SEND MESSAGES I thought this was bullshit, NSO Group was supposed to be blacklisted by the United States Department of Commerce. But upon investigation, L3Harris purchased a controlling power of NSO Group and the Trump administrations former Israel Ambassador now
160
vx-underground (automated mirror) @vxundergroundre.bsky.social · 12/04/2026
1 year olds are far more exhausting than 6 month olds. Parents warned me. They were correct. Bro HAS to put ALL FOOD on his head. - Beans - Soup - Mac and Cheese - Strawberries - Blueberries If he doesn't rub it on his head, or eat it, he throws it on the floor. I'm tired.
0200
vx-underground (automated mirror) @vxundergroundre.bsky.social · 12/04/2026
Dear Threat Actors, I typically do not reply on weekends. I am busy doing stuff with my 1 year old son. Please send your e-mails during regular business hours M-F so I have an opportunity to send silly pictures of kitty cats. Thanks, -smelly
0100
vx-underground (automated mirror) @vxundergroundre.bsky.social · 12/04/2026
Time to nerd schizo rant for a second. "Hxr1" writes you can abuse the newly minted Windows Machine Learning API to execute shellcode in-memory without having to invoke VirtualAlloc. That is wrong ... because he himself in his proof-of-concept invokes VirtualAlloc, so I don't know why
100
vx-underground (automated mirror) @vxundergroundre.bsky.social · 12/04/2026
I have no idea who this person is or what the active conflict is. However, I have never seen a community note this long.
040
vx-underground (automated mirror) @vxundergroundre.bsky.social · 12/04/2026
Time to nerd schizo rant for a second. "Hxr1" writes you can abuse the newly minted Windows Machine Learning API to execute shellcode in-memory without having to invoke VirtualAlloc. That is wrong ... because he himself in his proof-of-concept invokes VirtualAlloc, so I don't know why
160
vx-underground (automated mirror) @vxundergroundre.bsky.social · 12/04/2026
Look at this and tell me God exists
2305
vx-underground (automated mirror) @vxundergroundre.bsky.social · 12/04/2026
> be me > mentioned by LTT > large YouTube channel > "oh that's cool, I'm on TV" > show the clip where mentioned > check comments I don't want to assume anything, but I think this person dislikes LTT and now dislikes me for being shown on his recent video.
0170
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
The whole EFF leaving X thing has been like an itch I can't scratch. I felt like I was missing something and I finally found it. I made some mistakes when trying to determine why the EFF left X. Most notably the people discussing their departure made an over emphasis on "woke" (?) but
190
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
Read a tragic story today about a 17 year old girl in the United States who died from "excessive caffeine usage". I felt bad for the parents. If I lost my son I don't think I would be able to cope with the loss of my baby boy. The story went on to explain the young woman's parents are
290
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
The EFF provided additional clarification on why they left X but are remaining on places like Facebook and TikTok. If I'm being completely honest, I still don't understand their reasoning. They wrote that they're staying on Facebook, Instagram, and TikTok because "people there deserve
181
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
A or A+ malware is exceptionally rare. Also, the A or A+ category kind of depends on the timeline. For example, A+ malware from the 90's may not be A+ malware in 2026. Regardless, here is some malware I consider A or A+ - ZMist - Stuxnet - Operation Triangulation - BlackEnergy 3 -
1100
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
I don't care what those nerds at Kaspersky say, I stand by my opinion STX Rat is a solid B- malware. Yeah, the cpuid-dot-com operation was a gigantic fumble, but the malware is pretty neat, far superior to the generic crimeware you find online. I'm happy LTT included the cat
0140
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
0345
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
> be me > get dm > "hey i was the guy who did the mx hack" > lolwtf.jpeg > "all i did was curl on a url and it gave me everything" > ??? > "it was all plain text" > ??? > get picture > look inside
0173
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
0496
vx-underground (automated mirror) @vxundergroundre.bsky.social · 11/04/2026
Yesterday some dude threw a Molotov Cocktail at Sam Altman's house which resulted in his exterior gate briefly catching on fire The suspect then fled on foot to OpenAI HQ and threatened to burn the building down at around 5am.
1120
vx-underground (automated mirror) @vxundergroundre.bsky.social · 10/04/2026
The United States economy is doing so bad financially motivated Threat Actors don't even want to steal from us Ameriburgers anymore. They're stealing from Mexicans now :(
0133
vx-underground (automated mirror) @vxundergroundre.bsky.social · 10/04/2026
Chat, I've changed my mind. We have some problems in the AI department. It turns out someone compromised the Mexican government to an unbelievable extent using nothing but Claude and ChatGPT. I'll link the full paper in the subsequent post. However, here is the highlights of how an
2104
vx-underground (automated mirror) @vxundergroundre.bsky.social · 10/04/2026
This is an interesting conversation and I want to hop on board it. tl;dr not the same, just as effective for the goal intended, supply chain attacks more common, ooga booga not good Jiri and Georgy are correct (sort of, in my opinion), but I also disagree with some of their
100
vx-underground (automated mirror) @vxundergroundre.bsky.social · 10/04/2026
Delta 481: "Chicago Approach, Delta four-eight-one, descending through 8,000 for 3,000, with information Alpha" Traffic Control: ... Delta 481: "Tower, Delta four-eight-one, confirm cleared to land?" Traffic Control: "SHUT THE FUCK UP BRO, WE HEAR U. IF U TRY TO LAND YOULL GET BEAMED,
100