Nostr notes by vx-underground

Oh it's like online porno you read wtf is bro a gooner

2026-10-30T05:14:47Z

In reply to nevent1q…4u3p
_________________________

Oh it's like online porno you read

wtf is bro a gooner

Hi I have been informed by a family member something called AO3 ...

2026-10-30T05:09:36Z

Hi

I have been informed by a family member something called AO3 has been compromised.

Who compromised AO3? Why did they compromise AO3? If you're extorting AO3 currently can you give me specific things so I can give it to them?

They can't look at stuff and they're very sad

Wow! Big news today! Soon Discord messages will be indexable on ...

2026-10-27T20:31:26Z

Wow! Big news today!

Soon Discord messages will be indexable on Google. If you're in a public Discord which is discoverable, and has not changed its privacy settings, any messages posted moving forward can be found from search engines!

Hooray!!!!!1 (I think this is very bad)

Hello, Little People Living Inside Of My Computer, I have made my ...

2026-10-27T08:45:16Z

Hello, Little People Living Inside Of My Computer,

I have made my first YouTube video. I am bonking goop (malware) with a stick. I've tried to be both technical and non-technical to appeal to all nerds.

This was a lot of work. I love you.

https://www.youtube.com/watch?v=MqdR7eMqJnc

> be me > get dm > "smelly i found goop" > ...

2026-10-14T04:14:18Z

> be me
> get dm
> "smelly i found goop"
> wtf i love goop (malware)
> "Our EDR picked up unusual activity on the network. It was flagged as CLOUDHAZE a/k/a UNC7072"
> ok
> gibs files
> literally nothing on CLOUDHAZE
> literally nothing on UNC7072
> listed as primarily targeting healthcare
> crickets
> tf is this goop?
> look inside
> Rust malware
> make quick initial assessment
> say has weird anti-emulation stuff
> be wildly inaccurate
> be a doofus
> post inaccurate information on internet
> prolly shouldnt write about bonking goop at 3am while sleep deprived
> nobody calls me out
> calling myself out rn for being doofus
> resume bonking
> malware only runs when command line arguments passed
> "--check" or "--check-gui"
> if no command line, dies
> ok
> keep looking
> malware has bunch of stuff inside
> deobfuscates stuff inside itself
> dynamically builds C2 domains
> connects to C2 domains via HTTPS
> sends POST
> emulate
> goop does its thing, connects to C2
> authenticates
> radio silence
> operators likely watching and waiting
> goop doesnt automatically deliver more goop
> ok
> keep digging
> goop can accept commands from operator
> create process and redirect I/O
> read files
> likely has campaign ID associated with it internally
> dm goop giver back
> lol r u in healthcare bro?
> "No, I work for a large Oil and Gas company in Europe"
> company v v valuable to EU for strategic reasons since Ukraine Russia conflict
> hmmmm

Chat, I'm absolutely stumped. I have no clue what the actual fuck I'm looking at. I don't know if this state-sponsored malware, or a really dedicated financially motivated Threat Actor who cares deeply about their operational success. State-sponsored malware would align with potential motives for espionage. However, it would also align for a financially motivated Threat Actor who could make immense money if a compromise was successful.

I wish I could allocate more time to bonking this malware, unfortunately more malware needs bonking. Maybe someone else can pick up on this, a colleague, company, some stinky nerd, whoever or whatever.

C2s:
topsmagnificentgrade(.)com
tabbyottercub(.)com
flawlessgradecheered(.)com

Stager:
7f1db334fd3302cf98dd4afddf6f90e98e2a496fe7e86bf1832b89d02f3d73c3

Payload:
74aaa6b54133bbb2e77b2ae874e9900a907c269058f798a0a1197288ba1f7124

Unusual strings I don't understand:
- "Caira"
- "GUJONQGNQCLYEYJ"

> be me > get DM > "smelly i made a small ...

2026-10-06T16:15:23Z

> be me
> get DM
> "smelly i made a small vx-underground video game"
> ???
> "It's a WASD VXUG explorer. The entire VXUG library is walkable and explorable in a Gothic themed environment. The malware library cat (Pica) walks around with you as you explore the malware corpus. You can review samples, code, papers"
> ???
> sends video

It's actually kind of funny. I didn't even know GitHub ...

2026-10-06T04:51:42Z

In reply to nevent1q…dzc8
_________________________

It's actually kind of funny. I didn't even know GitHub banned us.

Someone sent me a DM about an active malware campaign on GitHub, when I went to check it out I couldn't even view public-facing repositories.

That is how I learned I got banned.

By investigating malware on their platform

Hello Unfortunately, GitHub has banned us. They have orbital ...

2026-10-06T04:36:13Z

Hello

Unfortunately, GitHub has banned us. They have orbital nuked the entire malware source code collection.

Big news for malware enthusiasts: I've uploaded an additional ...

2026-09-24T15:09:37Z

Big news for malware enthusiasts: I've uploaded an additional 170,000+ malwares to the internet

Bigger news for silly pictures of cats enthusiasts: I've attached one to this post

Hello, Little People Living Inside My Computer, I have made a ...

2026-09-24T04:37:03Z

Hello, Little People Living Inside My Computer,

I have made a YouTube account to discuss malware reverse engineering and development. It will primarily target noobs. It will be lighthearted, poorly produced, and spontaneous.

https://www.youtube.com/@MalwareForFun

crime is illegal and for nerds. this is bad and it is criminal. ...

2026-09-22T20:21:58Z

In reply to nevent1q…npay
_________________________

crime is illegal and for nerds. this is bad and it is criminal. don't compromise the fbi and extort them. that is bad

fbi job portal defaced and compromised? oh yeah, it's a silly ...

2026-09-22T20:16:51Z

fbi job portal defaced and compromised? oh yeah, it's a silly tuesday

You're all a bunch of God damn degenerates and you CANNOT be ...

2026-09-17T03:10:28Z

You're all a bunch of God damn degenerates and you CANNOT be trusted.

I asked if anyone had any video requests (implying the subject would be malware), because I'm beginning to find video creation kind of fun, and everyone immediately just starts talking about making videos about femboys and documentaries about cats

I don't even know why I ask you stinky nerds anything

Pic unrelated