The following video is a simple demo, a victim picks up a badUSB, then the badUSB pretends to be a keyboard, executing commands and connect to hacker’s server.

Researcher: {Alan Ho} ChatGPT took a couple of rounds to complete a simple tic-tac-toe game last time. This time I tried to create a Horses Racing Simulation Game with ChatGPT 4.0 model. The prompt I provided: please write a horse racing betting simulation game in html and javascript in one…

Researcher: {Alan Ho} Many of you have already been using ChatGPT for quite a while and probably able to get what you needed from the response. Using ChatGPT for programming is quite popular, many developers use the responses as templates or even writing the full source code. Today I am…

Researcher: {Alan Ho} Smishing, or SMS phishing, is the act of committing text message fraud to try to lure victims into revealing account information or installing malware. Similar to phishing, cybercriminals use smishing, the fraudulent attempt to steal credit card details or other sensitive information, by disguising as a trustworthy…

Our team has been busy over the past months, we have handled different incidents like ransomware (including negotiating with the attackers and paying the ransom), targeted attacks towards software vendors, as well as different researches. …

Researcher: {Alan Ho} A critical vulnerability for Apache Log4j was discovered and published, it has a huge impact to countless servers. There are already posts describing the details of the vulnerability (CVE-2021–44228), so we are just going to do a demonstration on how this vulnerability can be manipulated. We have…

by {FileDescriptor, Ozetta, Alanh0, Darkfloyd, Dragon, Byron, PilotOwl, Ken} Introduction We have found various vulnerabilities of Gather.town and reported to Gather, they have made and fixed the issues promptly and we are thankful for their generosity to gift us 2000 USD even they have no bounty program. Discoveries RCE on Gather town…

Research Team: Anthony Lai, Alan Ho, and Ken Wong from VXRL October 2021 Background Recently, we have dealt with ransomware incidents and can restore the ransomware binary from the C:\perflogs folder in the victim machine, which is afterward executed to encrypt the entire NAS file server. Given this incident, we hope…

@straight_blast is a penetration tester based in US and Hong Konger, he is passionate over CTF and pwnables, and is a core member of VXRL for years. The blog could be found from this URL The POC could be found from this URL