ar
Feedback

لا تقع ضحية للمخادعين! تيليمتريو يكتشف ويُميّز هذه القنوات 👉 إذا كنت تريد رؤية العلامة، اشترك

هیچی برگر [﷼]

هیچی برگر [﷼]

الذهاب إلى القناة على Telegram

shit/schizo posting

إظهار المزيد
لم يتم تحديد البلدالفئة غير محددة
210
المشتركون
+124 ساعات
-17 أيام
-430 أيام
أرشيف المشاركات
Repost from vx-underground
Using this script you can also send these Russian people very important and private messages (I didn't message them this, thi
+1
Using this script you can also send these Russian people very important and private messages (I didn't message them this, this isn't my image, someone else did) Images via "pro from 2c44"

Repost from vx-underground
I got the payload to this malware. It is absurdly silly. This malware is killing me bro. It is so unbelievably silly. This wa
I got the payload to this malware. It is absurdly silly. This malware is killing me bro. It is so unbelievably silly. This was 100% written using Claude or ChatGPT. I've never seen a malware payload LEAVE NOTES describing what it's doing. The malware has a Powershell script that connects to the C2 for stinky malware stuff. This module is responsible for persistence. Thankfully their persistence script documented the entire code base and file locations. Very cool. Thank you spoopy Russian Counter Strike scammers. Even more silly, the C2 is hardcoded as a string (seen in attached image). The C2 address shows it has been an active malware campaign since at least January 31st, 2026 based off of data present on VirusTotal. It was initially uploaded as "9lixh". This persistence script was from a victim machine so I've censored some data. Regardless, the botched cyrillic notes also makes me giggle. Russian to English translations present in this silly script which documents everything for us: # Пути для удаления # Paths for deletion # Завершаем процессы python и pythonw # Terminate/finish the python and pythonw processes # Удаляем автозапуск из реестра # Remove autorun from the registry # Завершаем процесс монитора # Stop the monitoring process # Новая функция для проверки f.json и убийства процессов # New function for checking f.json and killing processes # Проверяем флаг library # Check the library flag # Список процессов для убийства # List of processes to kill # Проверка флага удаления (каждые 20 секунд) # Check the deletion flag (every 20 seconds) # 20 секунд при интервале 2 секунды # 20 seconds with a 2-second interval # Проверка f.json и убийство процессов (каждые 4 секунды) # Check f.json and kill processes (every 4 seconds)

photo content

photo content

photo content

I went here and they said you’re their #1 customer
I went here and they said you’re their #1 customer

photo content

photo content

A 28yo "dutch" man was arrested in The Hague after making repeated bomb threats.
A 28yo "dutch" man was arrested in The Hague after making repeated bomb threats.

photo content

photo content

photo content

photo content

photo content