
vx-underground
@vxunderground • 454,606 subscribers
The largest collection of malware source code, samples, and papers on the internet. Password: infected
Shorts
Videos

> mcdonalds rolling out new SUPER INTELLIGENCE > archy > INTELLIGENTLY changes pricing > store 1: $5.69 for burger > drive down rode > two miles away > store 2: $6.89 for burger > archy trained on 14,000 restaurants > archy learned who willing to pay more
vx-underground88,753 views • 17 days ago

A short video explaining "vx" and the vx-underground project
vx-underground47,975 views • 12 days ago

Yes, I see your messages. I am still working on the malware bonking video. Making a bonking video is extremely time consuming because I have to take pictures (or videos) of everything, schizo rant into a microphone, and document everything without getting overly technical. I literally just read a random DM, then started documenting my entire bonking routine. This bonking could have been done in like, 30 minutes probably, I don't know, but making it a video out of it has taken me HOURS. I am nowhere near complete, and it needs refinement, but if you seriously want to see what I've created over the past couple of days here it is:
vx-underground68,756 views • 1 month ago

A woman's rant is going semi-viral in political circles on Twitter and Facebook. Some are citing her rant as evidence of potential electoral interference during the 2024 Presidential election. The woman's opening remarks claim she possesses a CCIE (Cisco Certified Internetwork Expert) — a very prestigious certification which is often possessed by truly dedicated people. Currently there are only 45,000 active CCIE holders worldwide. Only 3% of Cisco cert holders attempt it ... and only 26% pass — it has a 74% failure rate. Now it should be stated that no one in our group possesses a CCIE. We do not claim to be network experts, we're just malware nerds. However, despite our lackluster understanding of networking (beyond the computer science basics of the OSI model), we can confidently say this woman does not possess a CCIE and we believe she is lying. Additionally, we would like to note we did indeed watch this entire video. Despite this woman's jargon and clear ... plainly wrong information... we decided to give her a chance to speak her mind and opinion. We do not recommend watching the entire 8 minute video. You will have no benefit from it. At roughly 4 minutes you will see, very clearly, this is not a technical person.
vx-underground637,190 views • 1 year ago

Yesterday a video game streamer named rastaland.TV inadvertently livestreamed themselves being a victim of a cryptodraining campaign. This particular spearphishing campaign is extraordinarily heinous because RastaLand is suffering from Stage-4 Sarcoma and is actively seeking donations for their cancer treatment. They lost $30,000 of the money which was designated for their cancer treatment. In the steam clip their friend tries to console them while they cry out, "I am broken now." They were contacted by an unknown person who requested they play their video game demo (downloadable from Steam). In exchange for RastaLand playing their video game demo on stream, they would financially compensate them. Unfortunately, the Steam game was actually a cryptodrainer masquerading as a legitimate video game.
vx-underground260,729 views • 1 year ago

Did your slop Python script accidentally transfer $10,000,000 to a stranger? Did your vibe coded app accidentally leaked 300,000 peoples phone numbers, e-mail addresses, and passport? Don't worry, fam. The folks over there at ... Corgi ... now provide AI insurance.
vx-underground121,736 views • 5 months ago

I don't care what those nerds at Kaspersky say, I stand by my opinion STX Rat is a solid B- malware. Yeah, the cpuid-dot-com operation was a gigantic fumble, but the malware is pretty neat, far superior to the generic crimeware you find online. I'm happy LTT included the cat
vx-underground113,772 views • 6 months ago

Cybersecurity classes crazy nowadays. We never learned this stuff
vx-underground326,635 views • 1 year ago

Windows 10 support ends October 14th, 2025. It is the calling of the Linux nerds.
vx-underground203,324 views • 1 year ago

This video is all over social media right now. This is a VERY silly video. I audibly laughed out loud several times. Elon Musk and co. are not experts in DFIR (Digital Forensics and Incident Response). No matter how much of a sycophant you are for him or his organizations, Musk has no background in malware reverse engineering, identification, or development. What I suspect Kristi Noem is referring to in this conversation is the installation of an EDR (Endpoint Detection and Response) system. An EDR is basically an anti-virus that a system administrator can make rules for, add custom detection logic, etc. This is used in enterprise environments and installed on user managed endpoints (computers, electronic devices). Some people worry about EDRs because they monitor the device for any potential malware or compromise. Yes, EDRs can be incredibly invasive, but you should not expect privacy when using company equipment or government devices. The reason why I suspect she is referring to an EDR system is she states, "Elon and his team helped me identify some of my own employees in my department had downloaded software on my phone, and on my laptop, to spy on me, record our meetings, ... they had done that to several other politicals" If an employee, working with the United States Department of Homeland security, was actively working as an Insider Threat and performing ESPIONAGE, spying on politicians and people of power, it would be all over the news. Musk and/or Trump would have been SCREAMING about whoever had done it. Additionally, this would be a VERY serious charge to whoever was identified doing this. It would have been a massive scandal. The second super silly thing Noem says is she complains she was unable to email a PowerPoint presentation to someone because it was too large ("over six pages long"). She is implying here this is a technological problem, but it is NOT. This is done intentionally to prevent data exfiltration. The idea is network administrators put data size restrictions in place to prevent data theft. If someone successfully compromised the United States government, and was unable to steal data by traditional means (tunneling, C2, etc), a common exfiltration tool is email. They take the stolen data, and send it to a disposable email address to receive it. Hence, if they restrict the size of data allowed to be sent outbound, it makes it substantially more difficult for data exfiltration to occur. If a Threat Actor tries to send an email with a large attachment the EDR flags it as a potentially suspicious event and notifies network operations. She is comparing standard cybersecurity policies to ... lack of technology ... ? And also somehow saying this has something to do with the "deep state" (an ominous unidentified threat, or something). Regardless if you believe there is a "deep state" (???), cybersecurity policy and network restrictions are NOT a technological disadvantage. I also want to give a big shoutout to RT (Russian Today) for blasting this all over social media. RT knows this video and conversation is ridiculous. Russian Intelligence is probably giggling right not at the absurdity of it. They are loving the fact they can spit this video all over social media and (using Noems own words) imply the United States government has SPYS actively present from THE DEEP STATE. It sows distrust and misinformation. Bravo, RT.
vx-underground97,003 views • 7 months ago

Toronto Police launched Project Lighthouse in November, 2025 after police were tipped off about an unknown person(s) operating an SMS Blaster in downtown Toronto. Watch the video for an actual explanation. The fancy Detective lady gives a run down on what happened. tl;dr three chinese dudes some how built a custom made portable cell phone tower thingie in a van, drove around toronto with it. peoples cell phones automagically connected it to (its literally a cell phone tower thingie). when a cell phone connected to their portable cell tower thingie it would automatically send the connected phone a text which appeared to be from their bank or somewhere important. they interupted real cell phone towers 13m times lmfao. they were trying to steal passwords and stuff. no details released on how three random nerds managed to do this
vx-underground75,795 views • 5 months ago

young man documents himself having difficulties with his graphics card installation
vx-underground226,604 views • 2 years ago
0:24
Sensitive content
This media may contain sensitive content.