727 matches found
MalwareSourceCode
managed by vx-underground | follow us on Twitter | download malware samples at the VXUG/samples page 免責事項： 適用される法律で許容される最大限の範囲において、vx-underground およびコンテンツを vx-underground に提出した関連会社は、間接的、偶発的、特別、結果的、懲罰的損害賠償、または直接間接を問わず発生した利益や収入の損失、データ、使用、のれん、その他の無形資産の損失について、以下の事由に起因する場合、一切の責任を負いません。i...
vx-underground-wordlist
vx-underground-wordlist vx-underground의 .zip 파일 암호를 빠르게 크랙하기 위해 고도로 최적화된 워드리스트입니다...
Towards Automated Cyber Threat Intelligence Elicitation in Underground Forums
Cyber threat intelligence from underground forums has traditionally relied on passive monitoring. However, as users have become more aware of large-scale data collection, valuable intelligence has become increasingly rare in open forums, often migrating instead to private or harder-to-reach space...
New turnkey kit makes it easy for anyone to become a scammer
In 2026, online scams have unfortunately become part of the new normal. They can appear almost anywhere, from social media and messaging apps to search results, websites, and online communities, and they can target anyone. Sometimes, all it takes is a moment of curiosity and a convincing offer...
Inside the dark web: Stolen identities for 95¢, malware, and scams-for-hire
Most people have heard of the dark web, but few understand what it actually looks like or what goes on there. To separate fact from fiction, our research team spent 48 hours exploring it firsthand and documenting what we found. The dark web isn't inherently bad. It also serves legitimate purposes...
Inside Crypter-As-A-Service: An Ecosystem Analysis of the Exploit.In Underground Forum Research Talks
Crypter-as-a-Service CraaS has become a key enabling layer of the contemporary malware economy by providing on-demand evasion capabilities through underground service markets. In this paper, we present a longitudinal characterization of the CraaS ecosystem on exploit.in, a major Russian-language...
Criminal AI-as-a-Service in 2026: How the Underground Market Is Operationalizing Cybercrime
Introduction The underground market for criminally oriented generative AI has moved beyond the early hype surrounding 'malicious chatbots.' The gradual integration of AI as a productivity layer within cybercrime operations has become the dominant story, indicating that while the potential for ful...
HTB-Machines-writeups
somdv3 — HTB Writeups Personal HackTheBox writeup repository...
linux-security-tools
Linux Security Tools Linux security tools, scanners, crackers...
Malware-As-A-Service Redefined: Why XWorm is outpacing every other RAT in the underground malware market
Malware-As-A-Service Redefined: Why XWorm is outpacing every other RAT in the underground malware market By Boggavarapu R S S Srinivas Gupta and Ravishankar N C · March 12, 2026 Introduction In the evolving landscape of cybercrime, threat actors are constantly pursuing the "perfect" weapon: malwa...
Goodbye, dark Telegram: Blocks are pushing the underground out
Telegram has won over users worldwide, and cybercriminals are no exception. While the average user chooses a messaging app based on convenience, user experience and stability and perhaps, cool stickers, cybercriminals evaluate platforms through a different lens. When it comes to anonymity, privac...
From Extortion to E-commerce: How Ransomware Groups Turn Breaches into Bidding Wars
Ransomware has evolved from simple digital extortion into a structured, profit-driven criminal enterprise. Over time, it has led to the development of a complex ecosystem where stolen data is not only leveraged for ransom, but also sold to the highest bidder. This trend first gained traction in...
Unleashing the Kraken ransomware group
In August 2025, Cisco Talos observed big-game hunting and double extortion attacks carried out by Kraken, a Russian-speaking group that has emerged from the remnants of the HelloKitty ransomware cartel. Talos observed in one intrusion that the Kraken actor exploited Server Message Block SMB...
EUVD-2025-101257
Malicious code in undergroundcaribouz3n npm...
EUVD-2025-101255
Malicious code in undergroundzebraz3n npm...
EUVD-2025-94447
Malicious code in undergroundswiftz3n npm...
EUVD-2025-94448
Malicious code in undergroundpythonz3n npm...
Malicious code in underground_antlion_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558d7b46526e15f9c729f7348664f29ea327159826ab2f4a61df14cc56cd9237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-110060 Malicious code in underground_nightingale_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e33d931d20ac0273b0c753ed28966cde036315dd179cbf30c273054550e4c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...