v x

vx-underground.org Update #8

September 22nd, 2022

Hello, how are you?

We haven't updated this landing page in awhile. All daily additions are listed on Twitter or Telegram. Everything is going good.

Have a nice day.

Sincerely, vx-underground Team

vx-underground.org Update #7 - Repeating things we've said 100 times

June 4th, 2022

Hello, I hope everyone is having a nice day.

This post is to give a general update to individuals, or organizations, who visit this website. It has been awhile since we've issued a statement regarding our activities, objectives, etcetera.

1) We do not update this landing page frequently. This landing page is designed for large-scale updates which primarily focus on infrastructure. Day-to-day additions are listed on Telegram and Twitter. Both transmission mediums give updates at the same time - pick your poison. We do not and WILL NOT provide an API for updates. If you'd like updates, click the notification button on Twitter or Telegram. vx-underground is a free resource - we will not provide an additional resource for your company to profit off of our work.

2) Please use common sense when ordering merchandise. vx-underground has members from all over the world but our merchandise shipping is NATO based. If you reside in a country which the United States of America has sanctioned there is a high probability we will be unable to ship physical goods to your location.

3) We have no intention on re-creating a public chatroom. We always entertained the idea of creating a "community" but a "community" is a tremendous amount of work and effort. For our small base of actual contributors this results in resource exhaustion - we are incapable of delivering moderation or interactivity at this moment in time which we believe would be sufficient to grow a community organically. We will not bring back the Discord server (or any other variant eg IRC, Matrix, etcetera) for the forseeable future.

Thank you for reading. Have a nice day.

Sincerely, vx-underground Team

vx-underground.org Update #6 - CMS and rapid additions

May 1st, 2022

Hello, we hope everyone is having a good 2022 thus far.

We have a made a large backend update to vx-underground. Files are better organized and we have developed an in-house CMS to rapidly add content. Using this new custom CMS we have rapidly expanded the paper collection - we have so much more to come! Thanks to our donors and volunteers who made this possible.

Have a nice day, vx-underground Team

vx-underground.org Update #5 - Regarding updates, greetings, and more

March 4th, 2022

Hello, I hope everyone is good && we hope our friend in the CIS are safe, healthy, and in good spirits.

Today we will be announcing some minor updates to how vx-underground will operate. In summary - as time continues vx-underground staff members are becoming more and more spread out. It is difficult for staff to perform more trivial tasks such as updating HTML pages (even with a large portion of it automated). tl;dr we will no longer update this page indicating recent additions. We may only update this page in the event of a large or important update. If you'd like to receive updates on daily additions we recommend following the vx-underground Twitter account. Recent listing of vx-underground updates, as of this writing, will be removed from this page.

On a final note we are happy to share that our malware database has grown exponentially and we have met many wonderful people since its creation. Thank you to everyone who donates monthly to help make this database a reality. We hope we can continue to serve the information security scene / general public with great and cool things.

Sincerely, vx-underground Team

vx-underground.org Update #4 - Massive family additions

February 21st, 2022

We have a lot of content in queue. However, as always we are busy. We did however manage to push thousands of new samples (100+ new malware families). Enjoy

You can check out all the additions here: https://samples.vx-underground.org/samples/Families/

Samples added:
7ev3n
ActionSpy
Adhubllka
AdvisorBot
Aria-Body
BlackRock
CollectorGoomba
CoreShell
Darktrack Rat
DistTrack
EvilGrab
EvilPlayout
EyService
Fanny
Fastcash
FlawedGrace
Gamaredon
GameoverP2P
GandCrab
Gauss
Get2
GoziIsfb
HakBit
HalkBank
HavexRat
HotCroissant
Houdini
HTran
HyperBro
HyperSSL
IcedId
Icefrog
IsmAgent
Ixeshe
Jaff
JripBot
Karma
KghSpy
KimjongRat
Knot
Koadic
Konni
Korlia
Kwampirs
Lalala Stealer
Lambert
Lampion
Limerat
Lockbit
Loda
Lokibot
M0yv
Mandrake
Maze
Metamorfo
Mispadu
Murofet
MyDogs
Necurs
NetWireRAT
Pay2Key
Predator the Thief
Pteranodon
PwnPOS
QakBot
RansomEXX
Ratty
Rekt Loader
REvil
Rovnix
Satana
Sierra
Skipper
SshNet
Stitch
TelB
Trochilus Rat
TsCookie
Tur
TwoFace
TypeHash
Upatre
Urausy
UsbCulprit
UsbFerry
Vaggen
Voho
Void
WellMail
WellMess
WinDealer
WinMM
WinsLoader
XdSpy
XLoader
XorDdoS
XPack
XPertRat
XRat
XsPlus
XTremeRat
XTunnel
XXMM
Zenar
Zeus
ZeusAction
zLoader
zLob
Zumanek
zxShell

vx-underground.org Update #3 - Removals and notes

January 18th, 2022

Update:
- We've removed the sample page and replaced it with the directory listing. This makes it easier to manage.
- Zines have been moved to the archive page.

vx-underground.org Update #2 - Looking forward to 2022

December 26th, 2021

New year, New vx-underground

Hello everyone, we hope you're doing well and have had a nice 2021.

2021 was a year of exponential growth for vx-underground - it went from a relatively unknown website to a website receiving thousands of unique visitors a month and millions upon millions of downloads. We also successfully began pseudo-crowd-funding with monthly donors which has been incredibly helpful to us as well.

This growth has been both a blessing and a curse. Many good things occurred and many bad things happened as well. We are using these experiences as opportunities for us to grow as a team. Hence in 2022 we will be making some changes to the website, social media presence, and public Discord.

First and foremost - we will be dropping anything Threat Intel related. Although it is fun to explore what Threat Actors may be doing, this has brought us unneccessary attention. vx-underground aims to be a library - nothing more and nothing less. Starting 2022 the Threat Intel page will be removed and the "Notes from UG" series will be scrapped. If you're an individual interested in Threat Intelligence we recommend following individuals involved in Threat Intelligence on Twitter.

Second - vx-underground will be returning Malware Blocks in 2022. January 3rd we will re-launch the blocks, which will allow both mass-download and individual sample download. However, unlike our previous entries, samples will not be named using the Kaspersky naming convention. All files with be simple MD5 hashes. We are returning these blocks for individuals interested in mass-download for research or study. Furthermore, all files will be compressed and password protected to comply with our current host.

Third - it has been a privilege and an honor to help educate individuals all across the globe. It also feels nice to give things to people. In 2022 we will attempt to do more giveaways of both clothing merchandise but also educational literature, or anything else which we deem beneficial and malware related. In the beginning of 2022 we will be giving away a bunch of Infosec swag for free. We will be doing the giveaway on Twitter. It will be free for anyone to enter and potentially receive free stuff.

Finally, we would again like to express our gratitude to individuals who aided us this year.

Sincerely, vx-underground Team

vx-underground.org Update #1 - New site look

November 26th, 2021

Hello and welcome to vx-underground.org 2.0. Our site has made a large aesthetic update. Historically our website utilized ASCII art and other more hackerish aesthetics. Although this is nice - it proved to be increasingly difficult to add, remove, or organize content.

The new aesthetic we're using is also fairly generic. It is nothing special. It does not contain large amounts of images, CSS, or javascript. It is still HTML and basic CSS. We hope the website can be easily navigable and easy on the eyes.

Special thanks to our donors, twitter supporters, and everyone else who has continued to support us as we traverse these volatile waters

Sincerely,
The vx-underground team