+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Tools and Programs (https://hackforums.net/forumdisplay.php?fid=374)
+---- Thread: [Umbra Vision RAT] Can infect Windows, MacOs & Linux (/showthread.php?tid=6332575)
Pages: Pages
1
2
[Umbra Vision RAT] Can infect Windows, MacOs & Linux - D_3_I_M_0_S - Sep 26, 2026
Core Features
[+] Native compiled wrapper via Go shim (win_x64, lnx_x64, lnx_arm64, osx_arm64, osx_x64)[+] True cross-platform native support across Windows, macOS, and Linux
[+] 18 on-demand modules (in-memory only, loaded reflectively, nothing drops to disk)
[+] Modular architecture (activate only what the operation requires)
[+] End-to-end encrypted Custom Binary Protocol operating over SOCKS5 / TCP
[+] Multi-client management server console with live telemetry and session overviews
[+] Zero-configuration Tor Hidden Service integration (v3 .onion)
[+] Automatic Tor SOCKS5 Gateway Tunneling
[+] Adaptive Dual-Transport Layer (Seamlessly switches between Onion Routing and Direct TCP)
[+] Two-Stage Dropper decouples initial access vector from the core payload
[+] Full Unicode support for all languages and regions
Remote Control & Surveillance
[+] Hidden Virtual Desktop (hVNC)
[+] File Manager (fully featured remote browsing, transfer, upload, and execution)
[+] Task Manager (live process listing, suspend, kill, and injection capabilities)
[+] Advanced Keylogger (real-time live streaming with offline buffering & bulk exfiltration)
[+] Webcam Capture (silent image snapshotting and live video streaming)
[+] Live Microphone (real-time environmental audio capture and streaming)
[+] Registry Manager (full read/write/delete capabilities across all hives)
[+] Startup Manager (dynamic persistence control from the server)
[+] Reverse Proxy (pivot the compromised host into a network exit node)
[+] Interactive Shell (full reverse shell and terminal access)
[+] Desktop Surveillance (live active desktop screenshot capture and streaming)
[+] Power Controls (remote shutdown, restart, and sleep execution)
[+] Network Spreader (automated movement across local networks)
[+] USB Spreader
[+] Fleet Updater (hot-swap payloads dynamically across your entire node network)
Advanced Persistence
[+] Windows: Registry-based autorun and scheduled tasks
[+] macOS: LaunchAgent plist under ~/Library/LaunchAgents/
[+] Linux: systemd user unit injection and crontab cascades
Evasion & Anti-Analysis
[+] Process Hollowing (in-memory execution within trusted process hosting)
[+] AMSI Patching (runtime bypass of the Antimalware Scan Interface)
[+] ETW Bypass (Event Tracing for Windows suppression)
[+] NTDLL Unhooking (dynamic removal of security tool hooks)
[+] macOS Gatekeeper Bypass (automated quarantine attribute stripping & ad-hoc codesigning)
[+] Linux Evasion (ptrace TRACEME and advanced container detection)
[+] Multi-Layer Anti-Analysis (comprehensive Anti-VM, Anti-Sandbox, and Anti-Debug checks)
[+] Benign Masquerading (detached execution under deterministic OS daemon names)
[+] Polymorphic Engine (dynamically mutates signature and structure upon deployment)
[+] Build-Time Crypter (absolute cryptographic obfuscation unique to every single build)
Intelligence Gathering & Privilege Escalation
[+] UAC Bypass
[+] Credential Harvesting (extracts saved passwords, cookies, and tokens from all major browsers)
[+] Crypto Wallet Stealer
[+] Ransomware Engine
Builder & Deployment
[+] Dynamic Obfuscation (unique encryption of strings, configs, and payloads per build)
[+] LNK Wrappers
[+] Agent Binding (EXE, Word, Excel & PDFs)
Monero only payments accepted.
[+] 1 MONTH: $350
[+] 3 MONTHS: $700
[+] 1 YEAR: $2,925
Middleman/escrow services are welcome at your own expense.
ONLY Contacts:
Signal: @deimos.09
Telegram: @D_3_I_M_0_S
Latest scan with antiscan me
[contract=tid]Start Contract[/contract]
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - uncle red - Sep 27, 2026
no video no vouches just trying to scam users
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - Astraviruzz - Sep 27, 2026
vouch copy avaliable ?
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - D_3_I_M_0_S - Sep 27, 2026
(Sep 27, 2026 11:33 AM)Astraviruzz Wrote: vouch copy avaliable ?
I can setup a trial license, send me a message.
(Sep 27, 2026 11:32 AM)uncle red Wrote: no video no vouches just trying to scam users
Lol chill. Anyone who asked for a vouch got offered a trial, and I just uploaded a video. Way too quick to scream 'scam' bro.
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - Binance - Sep 28, 2026
Law enforcement is going to bend you over raw for just one of those screenshots.
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - Transporter007 - Sep 28, 2026
Vouch copy available ?
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - D_3_I_M_0_S - Sep 28, 2026
(Sep 28, 2026 06:56 PM)Transporter007 Wrote: Vouch copy available ?
Yes, a trial license is available, hit me up and il set you up
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - DarkCore - Sep 30, 2026
Was this created with 1 prompt? pd; saw some similarities with my thread
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - cltrade - Sep 30, 2026
Does it also grab credentials from email clients?
Can I have a vouch?
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - D_3_I_M_0_S - Sep 30, 2026
(Sep 30, 2026 01:15 AM)DarkCore Wrote: Was this created with 1 prompt? pd; saw some similarities with my thread
I might have taken some thread styling inspiration from you xD
(Sep 30, 2026 07:11 AM)cltrade Wrote: Does it also grab credentials from email clients?
Can I have a vouch?
Yes it does, i do offer trials. Hit me up
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - CompulsivePurchaser - Oct 1, 2026
Is it a working, defender fud USB auto run?
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - D_3_I_M_0_S - Oct 1, 2026
(Oct 1, 2026 10:54 AM)CompulsivePurchaser Wrote: Is it a working, defender fud USB auto run?
Yes
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - D_3_I_M_0_S - Oct 5, 2026
Uploaded a longer video of Umbra, removed images from the post as they were no longer needed due to the showcase video.
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - CL1B - Oct 7, 2026
(Sep 30, 2026 09:58 AM)D_3_I_M_0_S Wrote: I might have taken some thread styling inspiration from you xD
Classic modern day skid activities 🤡
#MakeMalwareGreatAgain
RE: [Umbra Vision RAT] Can infect Windows, MacOs & Linux - Invictus100 - Oct 7, 2026
(Sep 28, 2026 06:56 PM)Transporter007 Wrote: Vouch copy available ?
Did you test? You can put honest feedback here