vx-underground

2022-05-13 15:24:21 We've introduced a new section to the vx-underground malware source code collection on GitHub: PoS Malware

We've added malware source code which targets point-of-sales systems

-CerberusPOS
-JackPOS
-KatrinaPOS

Check it out here: https://github.com/vxunderground/MalwareSourceCode Открыть/Комментировать

2022-05-13 13:35:23 We've updated the vx-underground Malware Builder collection.

-A7m3d RAT
-BlackGuard Stealer
-TreasureHunter
-AdWind RAT
-AndroRAT
-Black Stealer
-BlackNix
-BlueBanana

Download: https://www.vx-underground.org/archive.html Открыть/Комментировать

2022-05-13 01:39:04 We've updated the vx-underground APT collection: content is better curated - papers are labeled correctly and duplicates have been removed.

Thank you to our volunteers who have been tackling this very painful work while we work on the secret project Открыть/Комментировать

2022-05-12 15:06:06 May 2nd, 2022 SentinelOne released a WatchTower Flash alert of a variant of Chaos ransomware dubbed "Yashma ransomware".

Yashma ransomware builder has been shared online via Arvin Club gang.

Download available here: https://www.vx-underground.org/archive.html#builders Открыть/Комментировать

2022-05-12 14:20:49 We've updated the vx-underground Windows paper collection.

- Making NtCreateUserProcess Work
- Demonstrating API Hooking in Rust
- Demonstrating Process Injection in Rust - Rusty Memory LoadLibrary

Check it out here: https://www.vx-underground.org/windows.html Открыть/Комментировать

2022-05-12 03:56:02 We've updated the vx-underground Leaked source code collection on GitHub

- Win32.Conti.c, previously leaked Conti ransomware source code. We forgot to upload it.
- Linux.RedMenshenBPFDoor, APT BPFDoor code segment leaked.

Check it out here: https://github.com/vxunderground/MalwareSourceCode Открыть/Комментировать

2022-05-12 00:47:13 Costa Rica has declared a state of emergency due to the attacks conducted by Conti ransomware group (or affiliate(s)).

State of emergency confirmation via BrettCallow, original news and notification via BleepinComputer

First image: April 27th, 2022
Second Image: May 8th, 2022 Открыть/Комментировать

2022-05-11 16:02:25 We've made some additions and enhancements to vx-underground.

First, courtesy of our volunteers, the APT page is better curated and displays correct papers names. Second, another 65,000+ malware samples are available for bulk download.

Download: https://samples.vx-underground.org/samples/Blocks/ Открыть/Комментировать

2022-05-10 21:35:17 When a University Professor says mathematics is required for Cyber Security Открыть/Комментировать

2022-05-10 16:54:10 Threat Intelligence trying to determine which new ransomware group is a fork and/or re-brand of Conti ransomware group Открыть/Комментировать