[R.I.P]

I've done lots of digging and, according to countless threads, the only universally accepted measure needed to be taken to become anonymous is a VPN.

Others talk about VPS', VM's, SOCKS5 proxies, SSH tunnels, proxy chains, etc. Everyone has an opinion.

Something almost no one has mentioned, which I think is astonishing -- the DNS and payment methods.

When the target reverse engineers the virus and traces you, they'll end up at your DNS. Not your VPN, not your SOCKS5, but your DNS. I know what you're going to say, "but the DNS uses my VPN IP." Well, let's suppose you happened to load the DNS website JUST ONCE without the VPN on. Let's suppose your VPN disconnected for half a second, when you refreshed the DNS page. Now they have your IP, and when the cops come asking them who owns that DNS, wait for a knock on your door.

Hell, let's assume you were perfect and never showed your real IP to the DNS website. What email did you use? Some throwaway hotmail, gmail, or yahoo, I'm sure. And guess what, if you ever logged into that throwaway email, even AGES ago, without a VPN on, the authorities can easily subpoena the owner of the email provider for your IP logs. Screwed.

This works the other way around too. Accidentally kept your VPN on for a quick look at Britney's hawt FB post? Were you auto-logged into your personal Outlook mailbox with your VPN on? Maybe you just kept that Skype/Discord chat opened to send a quick message after connecting? Well, you just gave that VPN an identity.

If you were 100% perfect all this time, better check your Bitcoin account. Yeah, transactions can be traced back to a service, and how are BTC purchased? Often times, via PP and CC. Both identifiers to you. The BTC you sent to the DNS service, the BTC you sent to the VPN service, and the VPS service. All of this can be traced back to you, unless you took precautions here as well.

So forget the VPS, VPN, VM, SOCKS5, TOR, and SSH. That's just what you need to stay afloat. If you want safety, hardened anonymity, you need perfection. Unless you're a faultless machine, you'll need a separate PC. The phrase is, "don't shit where you eat".

If you just use RATs to fool around with adclickers and miners, don't even worry about it. But if you care about anonymity, HARDENED anonymity, you seriously need to run a cost/benefit analysis. It'll take focus, concentration, and time. One slip up and you'll be shoveling snow in a Siberian prison.

Sometimes you can get caught up in setting up and creating and researching and troubleshooting for hours and hours, for a task like RATing, just for what you think is easy money. Take a step back and think, how much could you earn from cleaning out people's pools 3 times a week? I'd say unless you're doing this at least partially for enjoyment, you're wasting your time.

[kevy42]

i dont rat, nor have anything setup, but my way would be to get a Windows VPS on an offshore bulletproof/abuse tolerance server, than setup a VPN on a VPS(also on an offshore bullet proof host), and make it so that the Windows server ONLY lets me login with the VPN on.. that way i dont need to mess with DNS's and crap, if the server gets compromised well they wont get my ip, and sence bowth the VPN and VPS is offshore bullet proof.. i dont see anyone being able to with ease. or alternatively il VPN + TOR when logging into the VNC, that way the traffic is encrypted though the TOR exit nodes aswell, making in insanely diffecult for anyone to pin me down.


My method would have flaws.. any method has flaws.. but its alot safer than the usual things ppl do, like using temp mail and forgetting to use the VPN

[Rottapotta]

You are way too paranoid.

No cop will catch you for ratting, because its just skid shit.

[bzrΚ]

Unneeded. Everyone knows this. There are paid services here like Armadas DNS service and PunkDNS to provide this.

Also, if you buy a RAT here with intent for malicious use and use PayPal or another form of easily traceable currency, I hope you get caught.

[occupi]

You are way too paranoid.

No cop will catch you for ratting, because its just skid shit.

That explains why the FBI got involved with Blackshades then, right?

Don't just write off anonymity as inconvenient or paranoid. It does matter.

[Mirakuru]

You are way too paranoid.

No cop will catch you for ratting, because its just skid shit.

It doesn't matter what you are using, crime is crime.

[Rottapotta]

That explains why the FBI got involved with Blackshades then, right?

Don't just write off anonymity as inconvenient or paranoid. It does matter.

It doesn't matter what you are using, crime is crime.

OP: Because Blackshades (was meant for illegal purposes) was blatantly being used illegally and it had a plugin that allowed you to display a ransom page. If you really can't keep the DNS hidden from your other shit, such as cookies, cache etc, stop ratting completely.

Mirakuru: Didn't get your point.

[Autist]

What I think is the safest way is having a VPN and using a VM and in that vm have it save as slate and in that vm connect to an rdp that you bought with Bitcoin. Can't get any safer than this

[R.I.P]

My method would have flaws.. any method has flaws.. but its alot safer than the usual things ppl do, like using temp mail and forgetting to use the VPN

The method you mentioned is easily the most secure, without being paranoid. Unless you're some high profile hacker using tens of thousands of slaves for highly illegal activity, that is. In that case, a chain of VPNs and secure RDPs would be necessary. In the end though, if you're wanted enough, you'll be found.

You are way too paranoid.

No cop will catch you for ratting, because its just skid shit.

"RAT'ing" itself is harmless. It all depends how the RAT is used.

Unneeded. Everyone knows this. There are paid services here like Armadas DNS service and PunkDNS to provide this.

Also, if you buy a RAT here with intent for malicious use and use PayPal or another form of easily traceable currency, I hope you get caught.

If everyone knows this then why are 99% of DNS' No-IP or other public services? I'm not hating on these DNS', just pointing out that they can pose a threat to anonymity for those concerned.

As far as buying RATs goes, you don't put yourself in much risk if you buy a RAT with traceable currency. The RAT itself has no play in how you get caught, unless it is a RAT where slaves are managed by an online service.

[Rottapotta]

"RAT'ing" itself is harmless. It all depends how the RAT is used.

If everyone knows this then why are 99% of DNS' No-IP or other public services? I'm not hating on these DNS', just pointing out that they can pose a threat to anonymity for those concerned.

1. People use it as "legal" malware, what did you expect? Obviously you are going to start defend RATting because you do it in an illegal way, no way to talk around it.

2. There's no threat to your anonymity, because they don't do anything against you, unless you use the DNS in a malicious way. Why'd u need that kind of privacy, when your shit wont get leaked either way?

[TheWarOwl]

There's tons of ways to get caught if you're doing something illegal. Usernames can get you caught, if you have a username or email that you're using elsewhere that they can link to your anonymous persona to your others that you may not have used a vpn on - caught.

Database Hacks - many websites have been hacked and have our real info in it. If they can tie your ip/email/username or anything to what's in a dumped database... you can get caught. Even in backwards order - if you typically go somewhere without a vpn, then go there WITH a vpn, there's a way to tie the two.

Basically - anonymity means paying with different bitcoin address's, only using your vpn when your using your anonymous identity, separate emails and usernames for your anonymous identity etc... and shitloads of what's called "false info". I've seen people copy the username of someone on the internet they've found that's completely not anonymous, people publicly lie about there location or speak different languages... and the information they give out is always different making it impossible to decipher what's real and what's not. Even just talking about the weather outside is a way people have been located xD lmao

[SIM-2053312]

You are a dumbass, you dont even need a VPN to RAT. Thats why HF kids will make no money because they fear being caught each step of the way.

If you think the police will knock on your door for RATing, say goodbye. You dont deserve to have a computer. This is the most stupid shit I ever seen in my life.

Just dont do financial fraud or blackmail and you will have no problems at all.

[R.I.P]

1. People use it as "legal" malware, what did you expect? Obviously you are going to start defend RATting because you do it in an illegal way, no way to talk around it.

2. There's no threat to your anonymity, because they don't do anything against you, unless you use the DNS in a malicious way. Why'd u need that kind of privacy, when your shit wont get leaked either way?

1. What do you mean "what did you expect?" The vast majority of HF don't use RATs for "legal," purposes, don't kid yourself. Further, I never "defended RAT'ing". I am saying that it is harmless in itself, it all depends what one does with it.

2. "If they don't do anything against you, there's no threat to your anonymity." Anonymity is independent of what they do to you; the point is that a leaked IP is always a threat to your anonymity, whether or not you're using the DNS for malicious purposes.

You are a dumbass, you dont even need a VPN to RAT. Thats why HF kids will make no money because they fear being caught each step of the way.

If you think the police will knock on your door for RATing, say goodbye. You dont deserve to have a computer. This is the most stupid shit I ever seen in my life.

Just dont do financial fraud or blackmail and you will have no problems at all.

HF kids will make no money because of being cautious? Nah, at worst all they'll do is waste some time being overly paranoid. If you ask me, it's better to waste some time than to risk losing your future, no matter how small the chances of that happening are.

You're ignorant if you think RAT'ing can't ever become illegal enough to cause a police raid. Do you have any idea what kind of activity can be done with full access to someone's PC? I'm not going to start listing examples, but if you can't think of at least a dozen things you have no idea what you're talking about.

There's way more than financial fraud and blackmail that can warrant investigation. You listed these two categories yourself as two things that can land someone in prison. RAT'ing itself no, but for the third time it depends what one does with the RAT.

[Mr J0keR]

It's easy AF.
RAT From OFF-Shore VPS/RDP .
You're 100% secure .

[R.I.P]

It's easy AF.
RAT From OFF-Shore VPS/RDP .
You're 100% secure .

It seems like a good idea but there is always the risk that the RDP/VPS goes out of service, and then your RAT and all your clients go to nothing.