Channel
vx-underground
@vxunderground
Created July 30, 2020Advertised since April 2026
EN · EnglishSponsored-eligible
The largest collection of malware source, samples, and papers on the internet. Password: infected https://vx-underground.org/
Members
52,034
Avg. views
4,163
CPM (est.)
—
Ads indexed
30
Updated: 2026-09-14
Cashier signals
Paid media
Yes
Paid messages
Yes
Star gifts
54
Alert via Telegram BotWeb alerts on tgads.observertgads.observerFull audience & growth statstelegramstats.netHow to advertise in this nichetgads.net
Ad niches in this channel
Top advertisers in this channel
- 7Protonproton.me
- 6@zehraaarobot@zehraaarobot
- 5@telenews@telenews
- 5@medusa_gate@medusa_gate
- 4@vpslab@vpslab
- 3@risktop_bot@risktop_bot
- 2@gamearc98bot@gamearc98bot
- 2@dategramappbot@dategramappbot
Activity
04-2019 weeks09-07
Recent posts
- 2026-09-13
And if it sucks, and we all hate it and think to focus on something else, it's all good too. It's fun to fuck around and try new things. Video editing is so god damn boring though …
- 2026-09-13
Working on my first ever video on goop (malware) reverse engineering and analysis. It is extremely ghetto, has lots of filler photos with pictures of cats I have saved on my deskto…
- 2026-09-12
UPDATE: NEW DETAILS EMERGING THIS DISCOVERY WAS DONE BY A SINGLE MAN IN A REMOTE CABIN IN MAINE. IT ONLY COST HIM $36,000,000 IN TOKENS AND ENOUGH ELECTRICITY TO POWER NEW YORK CIT…
- 2026-09-12
BREAKING: NEW AI MODELS CONFIRM THE COW GO MOO MOO AND DUCK GOES QUACK QUACK AI EXPERTS MEETING MONDAY TO DISCUSS WHAT THIS MEANS
- 2026-09-12
This is this particular SmartLoader payloads configuration GitHub. This link is safe to view. It is very silly. ae.log is the configuration SmartLoader uses. dec.log I couldn't fig…
- 2026-09-12
Post attempt number four. I'm sorry to people who have notifications enabled and keep receiving notifications. tl;dr this is active goop, i am sharing the link because someone aske…
- 2026-09-12
My stinky degenerate nerds, I'm begging of you, some of you need to get a grip (key weird some, not all, don't go ooga booga on me) Every now and then I see some booger eater getti…
- 2026-09-12
> be me > get dm > "smelly i found goop" > wtf i love goop (malware) > sends like to GitHub > download > look inside .zip > instantly, at the blink of an eye, i recognize it > Smar…
Research from the blog
All →- 2026-05-06
CyberGhost Telegram Ads Profile: How CyberGhost Advertises in 2026
How CyberGhost runs sponsored Telegram campaigns in 2026 — creative formats, streaming-unlock angle, regional strategy, and archive findings from tgadsspy.
- 2026-05-06
Private Internet Access Telegram Ads Profile: How Private Internet Access Advertises in 2026
How Private Internet Access runs sponsored Telegram campaigns in 2026 — creative formats, FOSS audience targeting, no-logs credentials, and archive findings from tgadsspy.
- 2026-04-21
VPN Services on Telegram: NordVPN, ProtonVPN and the Privacy Vertical Deep-Dive
VPN advertising is the 4th-largest vertical in our Telegram archive — ~8% of all creatives. NordVPN, ExpressVPN, ProtonVPN, Surfshark: why Telegram is structurally core to VPN advertising, which geos drive volume, and how creative patterns differ by framing (unblock vs. privacy vs. speed).
- 2026-05-06
CyberGhost على تيليغرام: ملف الإعلانات 2026
كيف يُشغّل CyberGhost حملات مدعومة على تيليغرام في 2026 — الصياغات الإبداعية، استراتيجية البث، شبكة المسوّقين بالعمولة وبيانات أرشيف tgadsspy.
Sponsored impressions seen in this channel · EUR cabinet
Flags — the regions we asked our observer pool for while recording this ad in this channel. That is a label on our request, not a confirmed place of viewing: when no account is available in the requested country the pool silently substitutes another and does not say so. It is not the advertiser's targeting country either. We stopped requesting the region on {date}, so newer creatives carry no flags at all. The channel's main country (by its language) is highlighted in blue; regions under 5% are collapsed into +N.
