May 29, 2010 05:07 AM
(This post was last modified: Mar 28, 2013 10:02 PM by Paradoxum.)
TED'S SPREADING GUIDE
Hello all from HF! I thought I'd make a tutorial today showing you all the best and easiest spreading methods out there! Before I begin, I would just like to make something clear
I do not hold accountable for any actions people take after reading this. I wrote this guide for educational purposes only and am not responsible for any illegal actions people take.
I may have -3 rep but that is entirely because of 1 immature person, who didn't believe that my friend had died from throat cancer, had got very cranky and done what I call "rep abuse".
The other -rep is because I used to have an animated gif signiture of an animated man falling from a building. I have learned that it is not entirely what everybody wanted to see, so I changed it. At least one person found it funny (thanks Teh). Hopefully I can gain more support from this guide! :)
So let us start on spreading now. There are a lot of ways to spread your malicious software on the internet, some can even earn you money! Here are the top 4 methods
1. Fake Programs + Youtube (Press Ctrl-F and search for "str1" without the quotes)
2. Hyperlinks (Very similar to a drive-by. I will explain. Ctrl-F for "str2")
3. Skid Exploiting (Ctrl-F for "str3")
4. Limewire (go to "str4")
str1. Fake programs + Youtube - My best method!
For this you will require some decent programming knowledge and some imagination. I find this the best method of spreading, because it has got me over 50 infections a month. Make a fake program in Microsoft Visual Studio 2008 or download one. Use a programming language of your choice (I use Visual Basic). Make it an "Ultimate Password Stealer Gold Edition" or something like that which will get lots of hits. Make sure it always says that the "hack" was successful! If you like, you can make it a phisher but I cannot tell you how to do that on Hackforums. So once you have made your fake program. Get a screen capture software and a Video editing software. Try not to use Windows Movie Maker as it makes you look amateur. When you have got them, make a fake readme file for your fake program and put them in a zipped folder. It helps to also make a folder full of random fake "data files" such as methods.data (Just go into notepad and save anything as a .data file.) Then add that to your zipped folder. Now, Don't worry about your keylogger/RAT yet. You want to record a video of you unzipping the file and opening your fake program and using it. If your fake program requires the users password for whatever reason, be sure to censor it out if it isn't all ready, in your editing software. This encourage your viewers that you are putting your real account into the fake software. Then show an example at the end of the facebook account you "hacked" or whatever. Now edit the video to make it look nice and upload it to youtube. DO NOT WORRY ABOUT YOUR MALWARE YET. JUST USE THE DOWNLOAD LINK FOR YOUR FAKE PROGRAM! Be sure to be punctual in your video's description. You can find file hosting for free at http://www.mediafire.com/ . So now you should make some more youtube account and comment on them saying things like "Wow it works". Then click the "share" button below the video on your main account, then click "Email" and choose which friends you want to send the video to. Delete the negative comments you get and you will be fine. After your video reaches about 200-500 views (this may take 1-2 weeks depending on how well you shared it) you should add an annotation to the beginning of your video saying that "Because of many sites blocking this type of hack, you now have to download the framework before running this. Please look in the description.". Heres the tricky part! Make a batch file with this code: http://pastebin.com/fFeb5Xtg
This is a kill Anti-Virus script. DO NOT RUN THIS! You need to call it "click here to install delphi framework". After you have zipped up your "Framework" and uploaded it to mediafire you go to your zipped folder with your fake program in it and change the fake program to your keylogger/rat. Reupload it. Now change your youtube videos description to "download this framework FIRST <insertlink> Then download the program <insertlink> double click on framework to install it". Then sit back and watch the effect. You should get your first victim within 3 days and then as the views increase you will get more and more victims daily! Here is my video example! http://www.youtube.com/watch?v=ZXENOVXfDQk
As for money making, you can use linkbúcks on your links or sharecásh!
str2. Hyperlinks
Ahh, Hyperlinks! How great they can be when it comes to spreading! In this section you may need some experience in flash but it can always be done without flash. First make an account on http://bit.ly [WARNING: potentially infected]/mxsAb (I had to change the link to avoid the HF spam filter) and upload your malware to the my files section. Now, whats great about rípway is that you can make html documents right from it. It's quite awesome but in this guide we are just going to be uploading html documents. Now you have to Make an swf movie of the my computer screen saying "virus dectected by the C:\ drive, This is an old well known trick in the history of malware.
Here's an example. Please be aware THIS SITE IS DANGEROUS IF YOU ALLOW THE DOWNLOAD TO OCCUR It was made by some russian guy and NOT by me. The download on it is an EXTREMELY dangerous Rouge antivirus, accompanied with a virus toolbar known as the zlob trojan. Please visit this site at your own risk because I do not know if it contains drive-bys or not. But from my experience, you have to allow activex controll to download if you want to be infected. This site will not load in google chrome. Info on the zlob trojan can be found at http://en.wikipedia.org/wiki/Zlob_trojan
Spoiler (Click to View)
Anyways, now that you've had a good look at that. You will see it is a flash movie. With a hyperlink attached to the "Remove All" button. Now once you make your flash movie add it to a html document in adobe dreamweaver or microsoft office and add a button over the "remove viruses" button in the flash movie. Go to your rípway download for your malware and add the hyperlink for that download to the button. Now save the html document and upload it to rípway like you did with your malware. Go to http://bit.ly [WARNING: potentially infected]/ and change the link for your html document to something more sexy and volia! You've just made another way of spreading. Send your bit.ly [WARNING: potentially infected] link to your victims. Or you can add a CPALeád survey to the page to make money!
str3. Skid Exploiting
This is a very cruel but working method, and in some cases you will think that your victim deserved to be infected. First let me explain about Skids. Skids are Script Kiddies. Aged around 10-14, They like to take source code, compile it and tell all of their friends that they are leet hackers. They also tend to spread on Hackforums (which is retarded) and normally end up getting caught. They will scan keylogger builders on VirusTotal, ruining the coders work and laugh about it. On hackforums there is usually a -19 at the top of their posts. This is how script kiddies are in general, but from my experience, there are 3 different types of script kiddies:
- The fake virus skid
- The find and leave skid
- The forums skid
Code
lol=msgbox("this is a virus and now u will die",0,"haha")Find and leave skids are f*cking annoying, it is the find and leave skids that we will be infecting in this guide! Find and leave skids are normally aged 10-12 and spend their time searching youtube for "Hacking Tools". They have no intention of actually learning to hack, or joining a forum, they just want to hack ONE person and then they're done. I bet there is nobody on this forum who spent ages learning just to get one facebook password. Anyway, The most annoying thing about the find and leave skid is that They do eventually come across a RAT or Keylogger TUT on youtube. They will instantly go and download it, then set it up incorrectly and start messing up completely. They will start screaming and running to their mothers when their AV detects the builder OR even the keylogger they just made themselves. From My experiences, I have spied on a few RAT victims and seen one of them open Brutus and enter somebodies email address into the "Upload Passwords File" textbox. How retarded can that get? Another person downloaded teamviewer and started crying on webcam when AVG Antivirus Resident shield recognised it as a threat. He started running Ccleaner, Malwarebytes and ESET online scan all at once just because he didn't know anything about RATS. Basicly, Find and leave skids don't know enough knowledge to hack and mess up on real hacking tools. They use youtube as their source for info, but sadly, its not enough.
Forum skids are basicly what you find crawling around on HF. They are not as stupid as the other 2 kinds but still quite. They take source and modify the GUI's, ect. They leak threads from other forums without putting credit.
Now what we are going to do is simple. Simply Bind a real keylogger builder with a RAT :D and put a video up onto youtube saying. Cybergate RAT with all the right info. When a script kiddie learns what a RAT is, he will search youtube for it and will take your video as a professional hacking tutorial. Or you can even get a RAT victim from a previous method, (and trust me, they will come across rats eventually) when they do, close their window in their web browser and open up your video. Without taking control of their mouse. In Cybergate there is a feature called "Open Web Page in browser". Use the "Framework" Kill Av script I showed you in str1. So, this process is quite simple; When the time comes, why not recommend a well known RAT to your Skiddie Friend?
str4. Limewire!
This is simple. Bind a rat with a music file or porn video. Something that will be downloaded on Limewire. Try to use new songs or movies that are long out of the cinema but still not on DVD yet.
So I hope you enjoyed my guide! Have fun spreading✌
PS. Static FBML works well to but I won't go into that in this thread.
Please can you post after you have read this, because It took AGES to type this and now it is just going to end up on page 40 of this forum ;(
