Jul 9, 2018 12:35 PM
(This post was last modified: Aug 8, 2018 04:34 AM by Zombie [ ✔ ].)
Disclaimer: I am not trying to defame or harass any of the sellers or the coder himself, but this is FULL disclosure showing the link between all the products running off the same old 2012 source code (which is public and leaked by now)
This is NOT classified as sales trashing as I am only posting this out of spite towards people stealing from free/opensource code.
History of Data Acquired
I was not intending to make this thread but the coder gives me no choice. I will list one by one all the names this keylogger has went by.
1. ShadowLogger
So it was initially sold by ShadowLogger, mind you this was not coded by Marwix or Keiko or NoNameFail (the moniker he used to use then) - but it was coded by the user Tweety. - who shared the source of ShadowLogger with him for free.
The version he was actively selling was backdoored/infected (again not sure if he was aware of it) but it was highlighted in a blogpost on http://blog.MalwareMustDie.org
Link has been not posted publicly to protect Marwix's identit but it has in-depth proof of the first release being backdoored.
Note: This is coded by Tweety, and he is absolutely free to open-source it like imi-tat0r did with RWX RAT as people were stealing its code - https://hackforums.net/showthread.php?tid=4702361
2. ZeroLogger
For some reasons (after he possibly sold ownership to it lol) he changed it to ZeroLogger which was sold to Cyph Jr (now closed)
Since the owners of ZeroLogger never sold it after Cyph Jr was closed after his account was compromised.
I also have full permission from Cyph Jr to release ZeroLogger for free as he clearly does not want people profiting from something he bought full ownership for.
Sales thread for ZeroLogger: https://hackforums.net/showthread.php?tid=4688467 from 2015
3. LummoX Logger
After a while, LummoX Logger was released
The coder has junked the sales thread for it but there is an open auction thread: https://hackforums.net/showthread.php?tid=5852060
Note that this keylogger was from 2015 and he tried to sell ownership to it in 2018.
It is clear that that its the exact same source from a product sold in 2016 as we can conclude from Vyxn's post here which exposed LummoX being the same as NightShades Logger.
4. Volt Logger
This was sold by the member Darkwin here https://hackforums.net/showthread.php?tid=5101547
Soon after, it was known as Volt Logger, sold here: https://hackforums.net/showthread.php?tid=5235641 till the owner was closed.
5. MetroLog
Seeing this, Marwix was quick enough to sell it as MetroLog as well: https://hackforums.net/showthread.php?tid=5387222
Now, look closely here: https://hackforums.net/showthread.php?ti...id52394176
Post quoted:
Customer even alleges that the keylogger is copy + pasted.
6. Nightshades Logger
It was released as Nightshades Logger last year as well, this was sold by the user AFTERMATH
The sales thread is edited out: https://hackforums.net/showthread.php?tid=5406748
But there is a video here: https://www.youtube.com/watch?v=6BRBS_Q1CO4 (Published on Sep 25, 2016). Note that this is the same GUI as LummoX Logger.
7. Orion Logger
Moving on to the next one, Orion Logger.
Original thread: https://hackforums.net/showthread.php?tid=5731376 which was formerly sold by the user Maxim
It was sold to the user B FOR BADASS who is actively selling it here https://hackforums.net/showthread.php?tid=5730793
8. EdgeLog
Finally it is released as EdgeLog https://hackforums.net/showthread.php?tid=5858344 by the user Meow
Note that it claims to be the "newest keylogger out there, a fresh keylogger" while it is still running from ShadowLogger which was coded over 5 years ago
Screenshots Gallery
Now before anyone tells me some of these loggers are in C# and some are in VB which is pretty much the same lets have a look at all of their UIs
1. ShadowLogger
![[Image: iuyylAs.png]](https://i.imgur.com/iuyylAs.png)
2. ZeroLogger
![[Image: 60v0Iuj.png]](https://i.imgur.com/60v0Iuj.png)
3. LummoX Logger
![[Image: 0qeGfTn.png]](https://i.imgur.com/0qeGfTn.png)
4. Volt Logger
![[Image: PscKwx0.png]](https://i.imgur.com/PscKwx0.png)
6. Nightshades Logger
![[Image: 3CRoSI7.png]](https://i.imgur.com/3CRoSI7.png)
5. MetroLog
![[Image: atJ3xqn.png]](https://i.imgur.com/atJ3xqn.png)
7. Orion Logger
![[Image: ctqqtFt.gif]](https://i.imgur.com/ctqqtFt.gif)
8. EdgeLog
Spoiler (Click to View)![[Image: AGiQO.png]](https://puu.sh/AGiQO.png)
![[Image: AGiQR.png]](https://puu.sh/AGiQR.png)
![[Image: AGiQT.png]](https://puu.sh/AGiQT.png)
![[Image: AGiQW.png]](https://puu.sh/AGiQW.png)
![[Image: AGiQX.png]](https://puu.sh/AGiQX.png)
![[Image: AGiQY.png]](https://puu.sh/AGiQY.png)
The screenshots show enough similarity. I will leave the rest to the coder, Tweety. who wrote the code to elaborate about majority of the functions being the same.
Update:
New keylogger - #9 Ond Keylogger
![[Image: showthread.php?tid=5863701]](https://hackforums.net/showthread.php?tid=5863701)
Seems like a complete paste of Orion
This is NOT classified as sales trashing as I am only posting this out of spite towards people stealing from free/opensource code.
History of Data Acquired
I was not intending to make this thread but the coder gives me no choice. I will list one by one all the names this keylogger has went by.
1. ShadowLogger
So it was initially sold by ShadowLogger, mind you this was not coded by Marwix or Keiko or NoNameFail (the moniker he used to use then) - but it was coded by the user Tweety. - who shared the source of ShadowLogger with him for free.
The version he was actively selling was backdoored/infected (again not sure if he was aware of it) but it was highlighted in a blogpost on http://blog.MalwareMustDie.org
Link has been not posted publicly to protect Marwix's identit but it has in-depth proof of the first release being backdoored.
Note: This is coded by Tweety, and he is absolutely free to open-source it like imi-tat0r did with RWX RAT as people were stealing its code - https://hackforums.net/showthread.php?tid=4702361
2. ZeroLogger
For some reasons (after he possibly sold ownership to it lol) he changed it to ZeroLogger which was sold to Cyph Jr (now closed)
Since the owners of ZeroLogger never sold it after Cyph Jr was closed after his account was compromised.
I also have full permission from Cyph Jr to release ZeroLogger for free as he clearly does not want people profiting from something he bought full ownership for.
Sales thread for ZeroLogger: https://hackforums.net/showthread.php?tid=4688467 from 2015
3. LummoX Logger
After a while, LummoX Logger was released
The coder has junked the sales thread for it but there is an open auction thread: https://hackforums.net/showthread.php?tid=5852060
Note that this keylogger was from 2015 and he tried to sell ownership to it in 2018.
It is clear that that its the exact same source from a product sold in 2016 as we can conclude from Vyxn's post here which exposed LummoX being the same as NightShades Logger.
4. Volt Logger
This was sold by the member Darkwin here https://hackforums.net/showthread.php?tid=5101547
Soon after, it was known as Volt Logger, sold here: https://hackforums.net/showthread.php?tid=5235641 till the owner was closed.
5. MetroLog
Seeing this, Marwix was quick enough to sell it as MetroLog as well: https://hackforums.net/showthread.php?tid=5387222
Now, look closely here: https://hackforums.net/showthread.php?ti...id52394176
Post quoted:
(Sep 9, 2016 07:58 PM)maxlifted Wrote: was this product sold to you? i bought a lifetime license when it was previously called Lummox then later changed the name to Volt and a new name has emerged again called Metrolog. Kindly reactivate my license for this new name. My user name is jinny. Thanks
Customer even alleges that the keylogger is copy + pasted.
6. Nightshades Logger
It was released as Nightshades Logger last year as well, this was sold by the user AFTERMATH
The sales thread is edited out: https://hackforums.net/showthread.php?tid=5406748
But there is a video here: https://www.youtube.com/watch?v=6BRBS_Q1CO4 (Published on Sep 25, 2016). Note that this is the same GUI as LummoX Logger.
7. Orion Logger
Moving on to the next one, Orion Logger.
Original thread: https://hackforums.net/showthread.php?tid=5731376 which was formerly sold by the user Maxim
It was sold to the user B FOR BADASS who is actively selling it here https://hackforums.net/showthread.php?tid=5730793
8. EdgeLog
Finally it is released as EdgeLog https://hackforums.net/showthread.php?tid=5858344 by the user Meow
Note that it claims to be the "newest keylogger out there, a fresh keylogger" while it is still running from ShadowLogger which was coded over 5 years ago
Screenshots Gallery
Now before anyone tells me some of these loggers are in C# and some are in VB which is pretty much the same lets have a look at all of their UIs
1. ShadowLogger
![[Image: iuyylAs.png]](https://i.imgur.com/iuyylAs.png)
2. ZeroLogger
![[Image: 60v0Iuj.png]](https://i.imgur.com/60v0Iuj.png)
3. LummoX Logger
![[Image: 0qeGfTn.png]](https://i.imgur.com/0qeGfTn.png)
4. Volt Logger
![[Image: PscKwx0.png]](https://i.imgur.com/PscKwx0.png)
6. Nightshades Logger
![[Image: 3CRoSI7.png]](https://i.imgur.com/3CRoSI7.png)
5. MetroLog
![[Image: atJ3xqn.png]](https://i.imgur.com/atJ3xqn.png)
7. Orion Logger
![[Image: ctqqtFt.gif]](https://i.imgur.com/ctqqtFt.gif)
8. EdgeLog
Spoiler (Click to View)
![[Image: AGiQO.png]](https://puu.sh/AGiQO.png)
![[Image: AGiQR.png]](https://puu.sh/AGiQR.png)
![[Image: AGiQT.png]](https://puu.sh/AGiQT.png)
![[Image: AGiQW.png]](https://puu.sh/AGiQW.png)
![[Image: AGiQX.png]](https://puu.sh/AGiQX.png)
![[Image: AGiQY.png]](https://puu.sh/AGiQY.png)
The screenshots show enough similarity. I will leave the rest to the coder, Tweety. who wrote the code to elaborate about majority of the functions being the same.
Update:
New keylogger - #9 Ond Keylogger
Seems like a complete paste of Orion


![[Image: IgsUvYS.png]](https://i.imgur.com/IgsUvYS.png)


![[Image: Y2nfjB3.gif]](https://i.imgur.com/Y2nfjB3.gif)
![[Image: signaturetwo.png]](https://u.cubeupload.com/Vyxn/signaturetwo.png)
