+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Bazaar (https://hackforums.net/forumdisplay.php?fid=450)
+---- Forum: Marketplace Discussions (https://hackforums.net/forumdisplay.php?fid=163)
+---- Thread: [Community Alert] USER TRYING TO RAT PEOPLE VIA PMs UID=3252996 (/showthread.php?tid=5405381)
Pages: Pages
1
2
USER TRYING TO RAT PEOPLE VIA PMs UID=3252996 - Exchanged - Sep 14, 2016
This user: https://hackforums.net/member.php?action=profile&uid=3252996
is trying to rat me, and possibly other HF Members.
Here is a screenshot of a pm he sent me.
![[Image: 064352c0060fc90f2a1fa799679a6285.png]](https://i.gyazo.com/064352c0060fc90f2a1fa799679a6285.png)
Just be careful out there. And don't get scammed by him.
He got 19 posts, 0 rep, and L33T.
He was even looking for native rats lol. And now he sending me this "native" Rat.
Virus scans:
The Installation file: https://www.virustotal.com/da/file/2548dc29ae7442cf218095962c0bf8116ab1e05dabd3507adb23095c6bd91ab4/analysis/ 32/57
The .rar File: https://www.virustotal.com/da/file/179fc71142ef988ea6083be5b85bfb7b762e5aa10fc0dc15e6880e4a8d632ba0/analysis/1473859362/ 28/56
* - LastSession - Sep 14, 2016
Well did you scan his file?
https://hackforums.net/showthread.php?tid=5405383 lol
* - Exchanged - Sep 14, 2016
(Sep 14, 2016 06:10 AM)LastSession Wrote: Well did you scan his file?
Gonna do it now. (99% its a RAT), and that link he sent me is a LF link. And on there, u can see there is a link. But i will download now and put virus scan.
(Sep 14, 2016 06:10 AM)LastSession Wrote: https://hackforums.net/showthread.php?tid=5405383 lol
ye ikr.
* - LastSession - Sep 14, 2016
(Sep 14, 2016 06:15 AM)Exchanged Wrote: Gonna do it now. (99% its a RAT), and that link he sent me is a LF link. And on there, u can see there is a link. But i will download now and put virus scan.
Dude I wouldn't be that sure. I think it's just a desperate multi from LF.
* - Exchanged - Sep 14, 2016
(Sep 14, 2016 06:16 AM)LastSession Wrote: Dude I wouldn't be that sure. I think it's just a desperate multi from LF.
Scans Posted.
* - Riyu - Sep 14, 2016
Well it is a RAT. Wouldn't be 0/35 detection. But it does probably have a RAT.
* - LastSession - Sep 14, 2016
(Sep 14, 2016 06:28 AM)Riyu Wrote: Well it is a RAT. Wouldn't be 0/35 detection. But it does probably have a RAT.
Pretty much this OP. I mean why he should recommend LF when he wants to spread his RAT here?
* - Danny Khalifa - Sep 14, 2016
Thanks for the heads up dude.
* - Exchanged - Sep 14, 2016
(Sep 14, 2016 06:28 AM)Riyu Wrote: Well it is a RAT. Wouldn't be 0/35 detection. But it does probably have a RAT.
(Sep 14, 2016 06:29 AM)LastSession Wrote: Pretty much this OP. I mean why he should recommend LF when he wants to spread his RAT here?
Imminent Monitor Scanned: https://www.virustotal.com/da/file/3b4e468de899e46262e3d87b099e117f6b00c8eb20a49e1a1b9b1c0cb7846fa5/analysis/1473859798/
The RAT the guy is spreading:
https://www.virustotal.com/da/file/2548dc29ae7442cf218095962c0bf8116ab1e05dabd3507adb23095c6bd91ab4/analysis/
And just like by looking at the Results u can see the RAT the guy is spreading is a actual Rat.
* - LastSession - Sep 14, 2016
(Sep 14, 2016 06:33 AM)Exchanged Wrote: Imminent Monitor Scanned: https://www.virustotal.com/da/file/3b4e468de899e46262e3d87b099e117f6b00c8eb20a49e1a1b9b1c0cb7846fa5/analysis/1473859798/
The RAT the guy is spreading:
https://www.virustotal.com/da/file/2548dc29ae7442cf218095962c0bf8116ab1e05dabd3507adb23095c6bd91ab4/analysis/
And just like by looking at the Results u can see the RAT the guy is spreading is a actual Rat.
Well I guess he uploaded the cracked version.
Someone else should take a look into these scans. can't judge that.
* - Rezy - Sep 14, 2016
He got rep killed i think.
* - LastSession - Sep 14, 2016
(Sep 14, 2016 06:37 AM)Ͳimmy Ͳurner Wrote: He got rep killed i think.
I don't think so. He just didn't receive a positive reputation yet.
* - Account of the Gods - Sep 14, 2016
Ill try it on Vmware when I have time, found similar thread on LF with screens, however the people posting positive things there have like no posts
not into going into argue with anyone, maybe hes spreading malware, thats one option, and second possible is that he spreads his legit rat and wants to make it famous
screens really look legit
op you should consider making a site so it looks more legit
* - .Astro - Sep 14, 2016
Okay, but did you give him a reason to even PM you about a RAT in general? Did you ask for a RAT in the RAT'ing section, etc?
* - Exchanged - Sep 15, 2016
(Sep 14, 2016 11:26 PM)inShane Wrote: Okay, but did you give him a reason to even PM you about a RAT in general? Did you ask for a RAT in the RAT'ing section, etc?
I didnt ask for a RAT. I only asked for problems with Portforwarding.