[XOwnage]

As some of you might have already noticed the thread (https://hackforums.net/showthread.php?tid=3135921), we now want to clear things up.

First of all yes our current version (9.0.0) seems to be backdoored, but not by us.
We know this may sound a bit weird in the first seconds, but let me explain what i mean.

Sometime ago (I don't remember the exact date) we started to give RC a visual upgrade. So we looked around and found skincrafter. After some tests we were pretty satisfied and decided to go with it for the update. As we don't wanted to pay such a high price for a visual upgrade we decided to use a crack(pretty popular one).

However after the latest trouble we were looking into it and now Idea at all what these dropped files come from. First we thought someone acts with an faked version to trash us but you can through the thread yourself.

After some tests we thought we can determine it on the crack as everything made sense. Our proactives detected known web exploits and blocked them . Spoiler (Click to View)
[img]http://speedcap.net/sharing/files/f0/5c/f05cc4e697eafb95f867ce4dc3dd13b5.png[/img]
However we just thought it comes from skincrafter.

Followed by that we did some further tests and recordnized razorscanner got hacked . As you know we have embedded a scanner to RC. The file the builder accesses got modified with an iframe. That iframe leads to a french site which seems to be backdoored too, or what ever and that iframe also links to a russian site (might also be backdoored). In the video you can see the url and then you can trace it yourself.

We are sorry for all the trouble. But didn't even know about that ourself. That also explains why only a few were infected. First a exploit pack doesn't infect everybody and secondly if the pack gets loaded through a sjdb and might also not work on eveybody.

Video proof:

[Razοr]

At least we found out what happened now.
I already secured the scanner webspace and deleted the malicious content from it.
There is no danger at all using razorcrypt now anymore.

[«Oblivion»]

Bottom line is, you sold us a product which was infected, if it was by intention or not, who knows.
The damage was done, you cheaped out on buying a design for your product, so you used a cracked one, and we all had to suffer the consequences.
As I said in that other thread, my laptop with all of it's data is erased because of this, those malware corrupted my OS, so if you did it intentionally or not doesn't change much for me, I paid you to basically get shot in the foot.

Thanks.

Edit:
On top of all that, you claimed us all being liars and sale bashing.
Glad at least now you admit it.

[XOwnage]

Bottom line is, you sold us a product which was infected, if it was by intention or not, who knows.
The damage was done, you cheaped out on buying a design for your product, so you used a cracked one, and we all had to suffer the consequences.
As I said in that other thread, my laptop with all of it's data is erased because of this, those malware corrupted my OS, so if you did it intentionally or not doesn't change much for me, I paid you to basically get shot in the foot.

Thanks.

Edit:
On top of all that, you claimed us all being liars and sale bashing.
Glad at least now you admit it.

Read the whole part please. It was caused by razorscanner getting hacked

[Rozyn]

Read the whole part please. It was caused by razorscanner getting hacked

But you should still take responsibility. That is like if I made a booter and sold 40 people Lifetime membership then someone hacks into the site and release the booter source and I decide to just quit without refunds.

And the fact that you indirectly did damage to his computer by not securing your shit makes you responsible as well. He probably lost good memories and pictures, and other important shit. (I hope he backed up)

[๖ۣۜMystical]

Read the whole part please. It was caused by razorscanner getting hacked

Can i ask you this, when we asked and you said it isnt hacked all is well now you decide to say you were hacked. How do you think this sounds? How many customers do you think will trust you? People will now think Razor software is shady and you cant say they are wrong because it will be, you allowed someone to go onto your server and backed an exploit onto it that was infecting your members. To say the least you lost a large portion of your customers and when the truth was put in front of you and proof was shown you still insisted they were lieing.

[merry christmas]

So it was infected? How come all the reports by your users, such as Mystical, about files being dropping on their drive from Razor Crypter were ignored until now?

Wouldn't you think it's smart to check into these reports made by your users, instead of spending hours calling everyone liars and then in the end saying "nevermind, you were right, we didn't bother checking anything on our end before calling you all liars".

Seems unprofessional, I would never buy anything from you after this incident.

[Razοr]

Can i ask you this, when we asked and you said it isnt hacked all is well now you decide to say you were hacked. How do you think this sounds? How many customers do you think will trust you? People will now think Razor software is shady and you cant say they are wrong because it will be, you allowed someone to go onto your server and backed an exploit onto it that was infecting your members. To say the least you lost a large portion of your customers and when the truth was put in front of you and proof was shown you still insisted they were lieing.

We had no idea what was going on.
In the this now got fixed, and there it will not happen again.
And indeed we where right by saying RazorCrypt isn't backdoored.
It was RazorScanner - and yes RazorScanner got hacked, i know that this isn't better then a direct backdoor, but i guess you at least now can understand why we had no idea.

I also do apologize for what i have said and if i insulted anyone with what i have said and also i do apologize for what happened.
We fixed the security of RazorScanner and i can promise that it will never happen again!

[«Oblivion»]

But you should still take responsibility. That is like if I made a booter and sold 40 people Lifetime membership then someone hacks into the site and release the booter source and I decide to just quit without refunds.

And the fact that you indirectly did damage to his computer by not securing your shit makes you responsible as well. He probably lost good memories and pictures, and other important shit. (I hope he backed up)

My luck was I didn't purchase it while I was home on my PC, my laptop doesn't have anything really important on it, if it was on my PC I would be super upset though.

It's irrelevant how or why it happened, it did happen, your customers got hurt by it, take responsibility for it.

[Razοr]

So it was infected? How come all the reports by your users, such as Mystical, about files being dropping on their drive from Razor Crypter were ignored until now?

Wouldn't you think it's smart to check into these reports made by your users, instead of spending hours calling everyone liars and then in the end saying "nevermind, you were right, we didn't bother checking anything on our end before calling you all liars".

Seems unprofessional, I would never buy anything from you after this incident.

The way this problem was caused made it very hard to find the issue for us.
The code in the crypter was 100% clean, the files on the server where 100% clean, so we thought that this is fake.
I never spend a secound thinking of that RazorScanner could be hacked, until today, today i have seen this one single line of code in the scanners php files.

[Volim te]

Still it's YOUR fault it's backdoored even if it's not by you yourself learn to check programs or stop coding.

[Razοr]

My luck was I didn't purchase it while I was home on my PC, my laptop doesn't have anything really important on it, if it was on my PC I would be super upset though.

It's irrelevant how or why it happened, it did happen, your customers got hurt by it, take responsibility for it.

I do so, this results in a lot higher security checks on our servers and in all of our products.

[๖ۣۜMystical]

We had no idea what was going on.
In the this now got fixed, and there it will not happen again.
And indeed we where right by saying RazorCrypt isn't backdoored.
It was RazorScanner - and yes RazorScanner got hacked, i know that this isn't better then a direct backdoor, but i guess you at least now can understand why we had no idea.

I also do apologize for what i have said and if i insulted anyone with what i have said and also i do apologize for what happened.
We fixed the security of RazorScanner and i can promise that it will never happen again!

Keep in mind the scanner was apart of the crypter so it was caused by your crypter, was not like we had to download another project to scan an exe on, it was dropped after opening your crypter.

[Razοr]

Still it's YOUR fault it's backdoored even if it's not by you yourself learn to check programs or stop coding.

That could have happened to anyone who owns a website.
This even already happened to internet giants like ebay or amazon.
The only thing you can do about this is to learn from your mistakes.

[XOwnage]

But you should still take responsibility. That is like if I made a booter and sold 40 people Lifetime membership then someone hacks into the site and release the booter source and I decide to just quit without refunds.

And the fact that you indirectly did damage to his computer by not securing your shit makes you responsible as well. He probably lost good memories and pictures, and other important shit. (I hope he backed up)

We don't hide that. But what should we do then? We can't bring him his deleted files back.

Can i ask you this, when we asked and you said it isnt hacked all is well now you decide to say you were hacked. How do you think this sounds? How many customers do you think will trust you? People will now think Razor software is shady and you cant say they are wrong because it will be, you allowed someone to go onto your server and backed an exploit onto it that was infecting your members. To say the least you lost a large portion of your customers and when the truth was put in front of you and proof was shown you still insisted they were lieing.

Nah there is a difference . We showed up that nobody changed the razorcrypt file and / or modfied it. We didn't think about razorscanner could have been hacked.

Sure we know that we lost loads of trust and customers, but we also think that we want to bring this in the right light. We didn't 'allow' someone to get on our server, we got hacked. When sb. hacks your hf account and scamms everybody you also don't say That you allowed an random guy to scam with your account.

All of you were saying we backdoored our product but we did not we got hacked. Sure it's job to secure it the right way but we failed. So now have to care with the responsibility.