+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Bot/Trojan Spreading Guide. (/showthread.php?tid=66072)
Bot/Trojan Spreading Guide. - remoladen - Apr 11, 2009
In this tutorial/guide, I am going to tell you ways to spread your bot/trojan.
1. Torrents
This is pretty easy, and pretty successful.
First you need a torrent client, I use uTorrent, because it's the easiest.
Once you get your torrent client, make a folder full of .zip files with names of popular programs (e.g. Kaspersky 2009 Crack.zip) and put your bot/trojan inside.
Now you need to create the torrents.
Open uTorrent (or your other torrent client), and click File|Create New Torrent... Then add one of your fake programs (The Kaspersky 2009 Crack.zip or what ever).
Now you need to add trackers.
Here are some good trackers you can use:
Code
http://open.tracker.#.org/announce
http://www.torrent-downloads.to:2710/announce
http://denis.stalker.h3q.com:6969/announce
udp://denis.stalker.h3q.com:6969/announce
http://www.sumotracker.com/announceDon't check private, but do check start seeding.
Now click Create and save as..
Once you save, go to #.org, and register, and click upload torrent.
Do this too all of your fake cracks or programs.
You can also get programs or stuff that people might want, and just bind your bot/trojan to it then create the torrent that way (takes longer, but more people might download it).
2. Crack Request forums
This way is pretty easy and is pretty effective.
First get hosting that allows custom 404 pages (I suggest getting a .info domain from godaddy (only $0.99), because you can upload viruses, and have custom error 404 pages.
Once you get this, upload your bot/trojan to you hosting (e.g. "www.freefileupload247.info/files/bot.exe"), then make the custom 404 page "www.freefileupload247.info/files/bot.exe" (or what ever you uploaded you bot/trojan as).
Then no matter what url someone goes to on your site, it will download your bot/trojan
(like "www.freefileupload247.info/files/34736745/asdfasdg.exe" or "www.freefileupload247.info/a.exe" or even better "www.freefileupload247.info/files/2765345/Kaspersky.2009.Crack.exe")
Then find a software cracking forum that has a subform for "Crack Requests".
Then you click on a whole bunch of the requests and reply to all of them with something like this:
I found the keygen for it:
"http://www.freefileupload247.info/files/234572/Nero.9.Keygen.exe"
That is a good way of doing it.
3. Chatrooms
Here is another good way.
Go on some chatroom somewhere and put your name as something like Jenna247. Then PM a bunch of guys with something like this:
Heyy my name is Jenna asl?
You want to see a picture of me?
"http://www.freefileupload247.com/pictures/2047529/Me_at_sleepover.pif"
I don't know if you can open it, I'm on a mac.
If you rename a .exe file to a .pif, it will run just as the .exe does, so with your custom 404, if they go to your server /anything.pif, if will download your bot/trojan) And a .pif file looks like it could be a picture >:D
You could do this to a bunch of people at once, or make your bot do it.
4. Email
Not that easy, but could be good.
Make your bot/trojan get a list of all the zombie's (infected computer) contacts, and have it send out an email from a random email address (such as [email protected]) with something like this:
Hey it's Jenna, I don't think you remember me, but we met a while ago.
Here is a picture of us: "http://www.freefileuploads247.com/pictures/342772/2008_36327.pif"
Then if someone from their contacts downloads it, it will send to to all their contacts and so on.
I hope this tutorial/guide helped you, if you have anything to add, please do so.
- lilspanyol - Apr 11, 2009
Pretty good , basic guide but I don't see why this is "official"
- remoladen - Apr 13, 2009
Bump .
- Kain - Apr 15, 2009
Nice one, pretty simple. Thanks a lot.
- gekkehenk - Apr 15, 2009
i dont get the seeding part on the torrents,
but overall good guide
- Kain - Apr 15, 2009
It's simple, you make a .rar with cool name. Either porn or crack or keygen etc...
Then submit the torrent on big torrents website. Then seed it, people will surely download it.
- exchange.gold - Apr 15, 2009
Nice one, pretty simple. Thanks a lot.
- king.selling - Apr 15, 2009
GOOD, THANKS MAN !!!
- Lord_Sinister - Apr 15, 2009
THe idea is to actually crack something useful and add your bot too it. I.E. Crack fallout three so it's fully functional and bind your bot to it. If your bot is FUD then people will not only download this, they will seed it. Now you have a never ending supply of fresh bots. Don't be a dunce and label a folder Super Mega Ultra Huge Porn Collection and then have one file in the folder named rodneysbotnet.exe. That's not very intelligent.
Another method that I like to employ is to burn a bunch of cd's with your bot on it. First you write an autorun file to autorun a batch script. Write a batch script that runs in silent mode. See megas post in one of my threads to learn how to do this. The batch should run in silent mode and add your bot to the startup folder. The main idea is to label the disc something like porn, or anything else that may peak someones interest. Now the most important thing here is that your batch file plays a small porn movie (if that's what you labeled the disc as) as that will not raise any alarms as to what just occurred. That also raises the chances that this disc will be passed on to friends, copied and sold, etc. This is also extremely effective with flash drives. If you go the flash drive route, just remember that it must have U3 technology to use autorun.
- remoladen - Apr 16, 2009
No problem guys, and thanks Lord_Sinister, nice one.
- NB77 - Apr 18, 2009
wow if spreading a torjan is that easy. there will be a big mess!
you also need to do a lot of stuff
such as to make your torjan [or botnet] undetectable by AVs
and many others to consider.
- ne0nrouter - May 20, 2009
It'd still be illegal. It'd be fraud... you are INTENTIONALLY trying to deceive them. If, however, you put it in with the intention of them reading it, it'd be legal. Now, even if you were to put it in and you were not committing fraud by intentionally deceiving them, you better believe the court will fight that you were. Law is very tricky, it has a lot to do with your intent.
- iBH DeRaJ - May 20, 2009
ok so you can put your bot on a disk? kinda like putting it on a usb stick?
- Obergauleiter G - May 20, 2009
Most is copied. The torrent guide is copied.
- iBH DeRaJ - May 20, 2009
what u mean most is copied?