vx-underground

2022-05-21 23:01:51 BREAKING: vx-underground has ran Conti ransomware group through the Wu Tang name generator. We can say with 0% certainty their new name is "Monkey Unreal". Открыть/Комментировать

2022-05-21 20:00:54 If you try to buy an Afghanistan government TLD the domain registrar will request an official decree from the President of Afghanistan

Anyway, that's the story of how someone tried to buy vx-underground.gov.af for $25

Also no refunds Открыть/Комментировать

2022-05-21 14:06:27 We've updated the VXUG Windows malware paper collection.

- ShimBad the Sailor
- Abusing Intel VTune Amplifier for Persistence
- Exotic persistence - Windows Error Reporting Debugger key
- NtQueryInformationProcess and the AeDebugProtected key
and more...

vx-underground.org Открыть/Комментировать

2022-05-21 04:45:06 What else can we do?

- In Twitter bio
- In Telegram bio
- Listed on website
- Indexed on Google Открыть/Комментировать

2022-05-21 03:18:09 APT collection updates:

-2022.05.07/BPFDoor — an active Chinese global surveillance tool
-2022.05.16/Analysis of HUILoader (APT10, A41APT, Blue Termite)
-2022.05.20/Updated version of ArguePatch loader spotted in the wild

https://www.vx-underground.org/apts.html Открыть/Комментировать

2022-05-20 18:30:43 You may not like it, but this is what a real 0day looks like.

*Hoax CVE-2022-26809 proof-of-concept published by "rkxxz", image courtesy of Podalirius_ Открыть/Комментировать

2022-05-20 16:08:39 We've added some papers to the vx-underground.

- Linux.Nasty - Reverse Text Segment x64 ELF infector written in Assembly
- A Tale of Two Markets - Investigating the Ransomware Payments Economy

Have a nice day. Enjoy your weekend.

https://www.vx-underground.org/ Открыть/Комментировать

2022-05-20 09:08:56 Researchers at Cardiff University claim to have created a tool that can automatically detect and stop cyber attacks in less than 1 second using Artificial Intelligence.

... Take that as you will ...

More info: https://sports.yahoo.com/scientists-create-tool-kill-cyber-102446645.html Открыть/Комментировать

2022-05-20 05:27:44 Blue Team Tip: If you suspect your organization has been breached press the giant Antivirus button on your keyboard Открыть/Комментировать

2022-05-19 19:50:07 Note that ransomware groups often state that they're "acting in good-faith" and performing "pentests" for companies. Although this is often mocked, we speculate this can be argued in their favor (such as the case of Yaroslav Vasinskyi). Открыть/Комментировать