+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Quasar rat connecting to "proinity" (/showthread.php?tid=6197058)
Quasar rat connecting to "proinity" - SIM-5165532 - Mar 12, 2022
What is proinity.com? The built client of Quasar connects to it and I've no idea what it is, every google search about it is fruitless. I was thinking that it may be some sort of backdoor but I honestly don't know. It certainly isn't something the creator would want anyone to know as I couldn't find it in the source.
RE: Quasar rat connecting to "proinity" - jmark7 - Mar 12, 2022
are you sure you using the binaries from official github page?
RE: Quasar rat connecting to "proinity" - SIM-5165532 - Mar 12, 2022
I compiled the source code from the official github page. I didn't download the binaries
RE: Quasar rat connecting to "proinity" - bunnyduff - Mar 12, 2022
first time hearing about this
RE: Quasar rat connecting to "proinity" - jmark7 - Mar 12, 2022
(Mar 12, 2022 03:57 AM)Cabba01 Wrote: I compiled the source code from the official github page. I didn't download the binaries
why dont you look into the source, you already have it.
RE: Quasar rat connecting to "proinity" - SIM-5165532 - Mar 12, 2022
(Mar 12, 2022 05:29 AM)jmark7 Wrote: why dont you look into the source, you already have it.
I already said that I looked into it and didn't find any references to the domain or IP, please read before you reply.
RE: Quasar rat connecting to "proinity" - jmark7 - Mar 12, 2022
(Mar 12, 2022 05:34 AM)Cabba01 Wrote: I already said that I looked into it and didn't find any references to the domain or IP, please read before you reply.
if the source is clean, I dont see a reason of it to connect to domain.
Lets wait for other users view on this.
RE: Quasar rat connecting to "proinity" - SIM-5165532 - Mar 12, 2022
(Mar 12, 2022 05:46 AM)jmark7 Wrote: if the source is clean, I dont see a reason of it to connect to domain.Just because I didn't find it by searching text doesn't mean it doesn't exist, there are lots of sneaky ways to hide something like this in a project. But yeah you're right, even I don't know what it is.
Lets wait for other users view on this.
RE: Quasar rat connecting to "proinity" - SIM-5165532 - Mar 12, 2022
No I didn't scan it, my anti-virus did and prompted me with the IP the client tried to connect to. The website and company looked hella sketchy not to mention it was located in Switzerland so that's why I posted about it. My bad if it's nothing, I'm just paranoid over everything
RE: Quasar rat connecting to "proinity" - jmark7 - Mar 13, 2022
(Mar 12, 2022 11:41 AM)Cabba01 Wrote: No I didn't scan it, my anti-virus did and prompted me with the IP the client tried to connect to. The website and company looked hella sketchy not to mention it was located in Switzerland so that's why I posted about it. My bad if it's nothing, I'm just paranoid over everything
so at the end there is nothing to worry about the source.
RE: Quasar rat connecting to "proinity" - SIM-5165532 - Mar 13, 2022
(Mar 13, 2022 12:34 AM)jmark7 Wrote: so at the end there is nothing to worry about the source.Don't know, as I said there can be many ways someone could hide a backdoor in it. If everyone says it's nothing then I wont take this further.
RE: Quasar rat connecting to "proinity" - tridentbreeze - Mar 13, 2022
never noticed this before take a look today
RE: Quasar rat connecting to "proinity" - runs3c - Mar 15, 2022
are you certain it comes from Quasar? maybe you have another soft doin it
RE: Quasar rat connecting to "proinity" - SIM-5165532 - Mar 16, 2022
I know because it blocked the connection from the rat client. "Connection X blocked from program Y"