+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Silent miner setup | profitability | return on investment (/showthread.php?tid=6269803)
Silent miner setup | profitability | return on investment - WalleLv - Apr 29, 2024
Totally new to the scene so I wanted some advice or comments on my current trajectory and train of thought.
My initial plan was to setup silent miner with web panel and then spread the miner through youtube videos in which I advertise game cheats.
The concept should work in theory because for cheat to work victims should disable defender first. After some research I found out that people are not very successful with this method because when the miner is noticed and removed there is no way to start it again except if the user actually runs the exe again.
The tools I had setup for this were:
1. Unam Silent Crypto Miner Builder,
2. Unam Web Panel,
3. Unam Binder(with miner and working cheat for believability).
The cost of this setup is 0$ as all of the tools listed are open source and free. I would be fine spending 0$ and then finding out how profitable mining is but the idea of making videos and then publishing over and over just for the miner to run for one day is not really what I want.
As I understand to make miners persistent I would need a loader or RAT so that when miner is removed I could set it up again. Right?
So the loader or RAT needs to be undetectable. I looked around for some crypters and loader/RAT tools. The cost of these 3 tools adds up and I'm not ready to spend that much without some advice from someone more experienced in this field. So my questions are:
1. Are there any open source tools that I could use without spending anything and not get detected?
2. If I decide to spend on tools instead of building from source: Is mining profitable enough for me to earn back the expenses in relatively short time with method mentioned above?
3. Should I use Loader instead of RAT? Leaning towards loader for now.
4. Can you suggest any tools?
5. Can you suggest improvements in method?
RE: Silent miner setup | profitability | return on investment - Absence - Apr 29, 2024
Hi WalleLv
1. There are likely open source tools, however, malware is constantly being observed, and detected. The code in its natural state will raise suspicion on operating systems because it is infect ill-intended for the system, if it wasn't a situation where stealth was needed, there are plenty of options for above board mining opeartions.
2. Like anything, it depends on what you spend, and how you success you are on your campaign. Spreading malware for mining is not as easy as get 1,000 downloads, and your making money. There are different variables, like what token are you mining. Is it GPU required? So then you need machines that are better equipped. Harder to get. On your own, it will take some time and learning.
Even if you decided to just invest money into a bot shop and pay for a bunch of bots, they likely will not be what you need. A lot of bot shops regurgitate infected bots between them, and people holding the bots typically try to keep them as low stress as possible, which probably wouldn't be ideal for mining setups anyway. However, even if you say find a good one and want to go that way, you are increasing the amount you are investing, taking longer to get back. Does that make sense?
A RAT is a remote administration tool, used for things like remote desktop connection, however, these tools are often usntable, and you have 10,000 machines connected to a remote administration tool, it is likely they disconnect often, and you will experience a lot of issues. A loader is more of what you want.
A loader is a vector to deliver malware. It is usually a smaller script to deliver other malware.
Stealers are aimed at stealing information.
Starting a blackhat operation of mining with a botnet isn't a quick-easy scheme to make money. It is also illegal. You need to take consideration of a lot of factors, your technical skill, your current tools, budget, etc.
The forum has a market place, with premium vendors, I only really know who I wouldn't deal with.
Unam is already open source isn't it?
https://github.com/UnamSanctam/SilentCryptoMiner
One thing to start, I would start taking care of your opsec. Here is a guide for that
The Hitchhiker’s Guide to Online Anonymity
https://anonymousplanet.org/guide.html
These sections are filled with answers and resources
Beginner Hacking
https://hackforums.net/forumdisplay.php?fid=307
Blackhat Training
Hacking Tools and Programs
Here are some definitions for you and more to read. Take care to read this
https://hackforums.net/showthread.php?tid=6243938