+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Embed botnet files in email??? [NEED HELP] (/showthread.php?tid=5266429)
Embed botnet files in email??? [NEED HELP] - apollo2k - May 11, 2016
Hey all,
Currently working on setting up a botnet to mine BTC, but still working on a method of distribution. I don't want to use a stuxnet-like spreading algorithm as most antimalware systems now provide for countermeasures to this. I managed to get my hands on a pretty sizeable list of email addresses, and I was curious if anyone could help explain embedding a file to an email. Is it possible to embed without putting the file as an attachment or embedding it to an attached jpg? These are the most conventional methods i've seen but still not 100% effective, because who in their right mind would download a picture or a file from a stranger? If anyone knows a way to force download upon opening an email I would greatly appreciate the input. Thanks so much to anyone who replies!
* - Unit 61398 - May 11, 2016
MS office macro or .js is your best bet. The latest "trend" in ransomware is .js (usually used in phishing pretending to be an ticket or invoice), and I think other types of malware are going to follow suit and it's going to continue because office macros are getting saturated.
You can't "embed" an executable in a jpg, but you can try to trick people into thinking the exe is an image or whatever by using double extensions, reverse characters, and icons.