Let me start with the beginning, first I tried their BlackShades NET RAT
I paid, and after few days with difficulty, i got the RAT, but there was no free VPN like they mentioned.
however ... this person solved RAT issue,
https://hackforums.net/member.php?action...uid=401421
now comes the real scam from them,
I was using their Blackshades NET RAT. now i found something which caught my attention, on their website
"Word Installer - Over 90% infection rate! (RAT ANYONE, OR YOUR MONEY BACK!)"
once you login on bshades.eu, check http://www.bshades.eu/myservices.php
Proof PDF Click Here
Tired of sending or moving exe-files to other computers? Tired of computers not accepting exe-files?
Blackshades now offers a very unique solution!
Instead of sending or moving your exe-file(s) to other computers, you can now just open a Microsoft Office Word-document and your exe will automatically get installed without any interaction at all. Word Installer is a high quality product, based on a 0-day MS exploit, which allows you to install any exe-file (executable) easily on any Windows based PC having any Microsoft Office version installed.
Enough said! The product is very easy to setup, and you don't need anything else than a ready exe-file to get started. If you can't crypt it, then no worries!
What you will get in order to get started is a simple generator which will ask for your exe-file and a Word document. You will also have the possibility to crypt your exe-file before it generates the output Word document. You may then share the word document with anyone. Once the document is opened on the target PC, your exe will instantly get executed without any notification.
Please note: The price for this product is now 650$. Payment methods will be offered via email and only serious buyers will be accepted!
Purchase Word Installer $650
Payments for this product are processed manually.
If you're interested in this product, then contact us at: [email protected]
once you login on bshades.eu, check http://www.bshades.eu/specialproducts.php#word-exploit
Proof PDF Click Here
I asked him (https://hackforums.net/member.php?action...uid=401421) about my interest in their Doc / Word Exploit.
he replied
"Just send an eemal with thosr questions to [email protected] and he'll help you out with that sir."
Proof PDF Click Here
now I sent "[email protected]" the same message,
Hi,
I have been redirected by your partner " blackshades" from hackforums, I am just going to copy the message here below.
first of all, I am doing good with my blackshades copy.
now, I am interested in binding server with doc file worth 650$
I like to know more information regarding this,
1. is latest .docx file ok ? or will you be copying the contents of .docx file from what I will be providing ? (I need some specific contents of 1 page to be embossed on doc file you generate can it be done ?)
2. if you will be crypting, how long does it stay 100% FUD ? is that included with 650$ ?
3. do you have support if the file gets busted by any AV ? will you be able to get me new doc file ? i meant to ask how confident you are with the length of FUD if you crypt. Can I expect least for 3 months ?
4. Any other restriction / conditions / limitations on this service you are offering ?
5. how long does it take ? to crypt & bind my server with provided doc file ?
these are the questions I have in my mind. Looking forward your reply.
byfrost
Proof PDF Click Here
He replied immediately without much delay,
Hello,
Thank you for contacting us.
1. You will receive a generator where you can generate either .doc or .docx output file.
2. You will get a special crypter incuded with the generator which has been FUD for over 4 months now
and being updated once there is any detection on it.
3. As specified above, the generator will be updated for free of charge during for lifetime.
The document itself has never been detected for over 2 years now, so that's nothing to worry about now.
4. There are no restrictions, other than that we will reserve the right to terminate your account on our
website and not provide updates in case we detect that you've been trying to resell the exploit.
5. The generator generates the outut exploitable document about instantly.
The payment method is Western Union for this kit.
Let me know if you're interested.
Kind regards
Proof PDF Click Here
I replied him again that I am sure i need it, I was never be suspicious that he might scam me,
since I have done BlackShades NET RAT deal with his crew earlier.
Hi, thanks for your quick & accurate reply
I am impressed.
I definitely need the tool.
do you accept bitcoins ? or Western Union is the only available option ?
if bitcoins are ok, send me the BTC wallet
if Western Union is the only option, please provide me necessary information,
if its Western Union, I might take up to 2 to 3 working days for the payment is that fine ?!
waiting for your reply
thank you
byfrost
Proof PDF Click Here
He replied,
Sure, send to: 1Db3k79Gkp32mFXn2nQtDDu9vppQGRkxP5
Use http://preev.com to convert as I use them as exchanger.
Proof PDF Click Here
Without second thought I just sent the coins to him for the wallet he provided. on 5th September
https://blockchain.info/address/1Db3k79G...vppQGRkxP5
Prof of payment: https://blockchain.info/tx/d7d05831db56a...91c0375c04
ok,
5.354 BTC (preev.com Bitstamp exchange value)
has been sent to 1Db3k79Gkp32mFXn2nQtDDu9vppQGRkxP5
please verify and guide me. :)
thank you
byfrost
Proof PDF Click Here
He replied,
Hello,
Do you have TeamViewer? Would be easier to help you install the kit.
Kind regards
Proof PDF Click Here
I was thinking why does this man require Teamviewer ? what is his problem!
ah. Is teamviewer is a must ?
can I try ? ;)
I can install tv in few seconds not a problem though.
if it is a must then i got no choice ?!
thank you
byfrost
Proof PDF Click Here
His reply was suspicious,
I will need to get your HWID details and so for example.
You will also need to install some additional .NET related things...
Proof PDF Click Here
you can get the HWID.exe from bshades.eu website visiting http://bshades.eu/HWID.exe
so i did and sent him the HWID like said below.
my HWID : -995264490 (same as my bshades copy)
yes name me the things, i will install plugins related to .NET ...not an issue.
you can pass me the setup files, I will do it by myself, if in need of any helps I will make sure to pass you the tv codes for immediate help.
thank you.
byfrost
Proof PDF Click Here
The guy never replied me... he put me hanging there for 16 hours, then I sent him a message again.
Here is my payment confirmation
https://blockchain.info/tx/d7d05831db56a...91c0375c04
Here is a proof of you moving the coins
https://blockchain.info/address/1Db3k79G...vppQGRkxP5
I think I did not disappoint you in paying up more coins than standard MTgox rate.
where is my product ? I am still waiting.
byfrost.
Proof PDF Click Here
After 7 hours i received his reply
what the heck, guy took 5.354 Bitcoins from me, and says he is busy ? what an irresponsible professional.
Hello,
Sorry about that. I have been busy with work.
Get me your TV details fast and I'll get on to set it up for you fast.
Kind regards
Proof PDF Click Here
I was totally upset, but did not show that to him,
I needed the product, so sent him teamviewer codes,
ID: 284 319 615
Password: 7h7ha5
It's a mess in my desktop, samples.
Your folder is under Desktop > "bss"
byfrost
Proof PDF Click Here
After this, this guy logged into my machine, and did some drama,
starting conversation and asked me about investing 200 Bitcoins to his company,
I was expecting him to finish the work what he started, i was listening to his ideas,
(I have the chat recorded and saved; in a text file I will be providing it when in need of that, for judge)
(Can also provide, Teamviewer Log files)
He asked me to Remove the present Dot net Framework and told me reinstall, I did as he asked me to do,
he looked HWID, (was the same as i provided)
then he transferred a tiny 16 KB exe file named "wgen.exe".
That did not work, it was showing some Dot Net error..
now he got a reason, that I am running Virtual machine,...
(usually i keep all my such works under encrypted VMware, but this guy is not ok with it,)
fine I provided him my Main Operating system Teamvewer access.
now he did the same thing, he checked HWID and transferred "wgen.exe" 16 KB file
That gave another error, "HWID not supported"
now he gave a reason that his guy wont let him have more products so he will get it built a new one for me,
in 8 hours time, but he never came back, he never even droped me an email,
I am having 2 samples of "wgen.exe" 16KB file which he transferred, both has different MD5 hash,
and when I open with hex editor I see 65% is filled with "00" rest of % has just a error message encoded.
I can provide for any hex expert editor who wants to check those 2 file samples.
This happened on 7th September 2013, you can check the proof PDF files for email header timing to be accurate.
so i started sending him mails again one by one since then, which never got attended or replied,
hi,
it's the time.
if you have missed the codes, here it is.
456 846 675
3583
waiting,..
byfrost
Proof PDF Click Here
I waited long!
If you will be sending me the new wgen file, HWID of the main OS:
-1072969011
see what you can do.
I really wish you could have completed the work before your vacation without me hanging in the middle.
byfrost.
Proof PDF Click Here
hi,
new codes
456 846 675
8468
I am waiting.
byfrost.
Proof PDF Click Here
Hi Mr.David,
I remember now, that you are on a vacation which you have already mentioned, since you can read my message on your phone like you said, it will be way better for me to expect you rather waiting for you all day to log in on tv.., if you can tell me some specific time when you be able to get back to my desktop on tv and fix the work which is left in the middle.
So, if you reply me the day & time (UTC) to resume the work, I will highly appreciate it.
and about our investment talks, I am stable, but we must improve our understandings with each other. You know what I mean,
looking for your quick reply & firm timing.
byfrost
Proof PDF Click Here
hello,
please tell me, when will you be completing the work you left in the middle ?
I am waiting.
byfrost
Proof PDF Click Here
hi,
I understand you are a busy man. I appreciate it. but right now,
I am waiting the started work to be complete. If the fault on my side, I am ready to add 2 BTC extra, so it will be 1000$
...but please finish the job. contact me. don't leave me hanging here,
thank you.
byfrost
Proof PDF Click Here
Sooo many emails, from 7th September till 9th September I got no replies, none = none.
(accurate times are recorded inside PDF proof of email print copy)
I opened a support ticket on bshades.eu and i had no luck,
the crew members kept on asking me to contact "[email protected]"
-------------------
Posted by: You
September 9th, 4:35 PM
Hi,
I would like to contact Mr. David, I am waiting for him to log in to my desktop and fix the doc Exploit which setup the half way (on Saturday).
payment done on 4th.
thanks a lot.
-------------------
Posted by: stevmager
September 9th, 6:21 PM
You should email [email protected] for this.
Rate this reply:
-------------------
Posted by: You
September 9th, 6:28 PM
yes, i did. last 7 of my emails, unanswered, he told me that he will get back in 5 to 6 hours, leaving the work half on my desktop,
but then i did not hear from him its been 2 days so just opened a ticket!
any idea what time he will be free ? i mean to setup, I am a customer. not freebie.
thanks for your reply.
-------------------
Posted by: d0s3s
September 9th, 10:17 PM
There is nothing much we can do here, that product is exclusively handled by David.
Please email "[email protected]".
-------------------
Proof PDF Click Here
now I created a new email, with a new topic and sent him, on 9th September
Hi,
I need some replies from you, I cant be left out hanging here with half work.
I see you are active on main site, your crew wont support me since you are the only handling this thing.
I am not asking you for free setup, why not you finish the job which you left in the half ? why you are not replying me ?
you told me that you will get back in 5 to 6 hours, you did not make it up. at least you could have replied me.
at least you can tell me what is the problem ? If you are not in a position or in a tour just tell me the day i can expect you.
I am a customer, david. I am a prompt business man, but you are an expert developer, I need some answers,
I need the product. I need it to be setup. tell me when it can be done.
Not really a good treatment for a genuine & serious customer.
byfrost
Proof PDF Click Here
good, finally he replied, but guess what, soo irresponsible very unprofessional answer
and a lame reason/execuse, i was waiting all night till without sleep for this guy to do his work,
he never logged and gives a reason that password of teamviewer was changed, what the heck ?
Sir, I'm out of country and can't be dealin with these things from over here...
Hope you understand what I mean.
I will be back in 1-2 weeks. I was trying to get on your TV before but the pass was changed...
Proof PDF Click Here
I replied him back, that I need it to be set up, which he left his work in half,
I know you are a man who is capable of making things happen.With all do respect, Please do something, with in a week.
byfrost
Proof PDF Click Here
And Again no replies, :( i thought it is his nature being sooo much un-professional, so i decided to wait
on his time line what he mentioned me that 1 to 2 weeks,
I was frequently checking his activity, he never seemed like he is on a vacation on his activity link
check this link after logging to bshades.eu http://www.bshades.eu/userprofile.php?user=david
So, i gave some break, on 21st AFTER 16 DAYS of payment, I started sending him messages,
Hi,
I have done my payment for word exploit on 5th of this month, and you have left the work half and told me to wait 1 to 2 weeks, it's already 16 days passed and is 21st September.
Here, is my teamviewer codes, please finish the job what has been started.
456 846 675
3817
Thank you
byfrost
Proof PDF Click Here
Hello Sir,
I have done my payment without any delay, promptly,
I do not know why I deserve a longest waiting for my product even after doing my payments promptly,
I still do not have the product, which I am sad about.
Please setup my product, the 2 weeks time you told me to wait is over few days ago, I am still waiting,
Please respond me. please tell me when will you get me the product set up ?
Thank You
byfrost
Proof PDF Click Here
hello sir,
please refund my 5.354 BTC to 14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
thank you
byfrost
Proof PDF Click Here
Another, bshades.eu ticket
--
osted by: You
September 21st, 9:01 PM
david / alex is absconding, i am not hearing from him, he never replies me, but if you reply from fake accounts, he will reply,
my payment proof,
https://blockchain.info/tx/d7d05831db56a...91c0375c04
done on 5th september 2013.
who is responsible for this / please get my product.me which i have paid for
or refund me the same 5.354 BTC to 14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
--
Posted by: stevmager
September 21st, 9:25 PM
You will get contact via email.
Rate this reply:
--
Posted by: You
September 21st, 9:29 PM
I am very Sorry I did not understand it clearly,
I have emailed him so many times, I received no replies, still are you suggesting me to email him ? please correct me if I am wrong.
Please provide me my product or a refund.
--
Proof PDF Click Here
Proof PDF Click Here
These crew members are doing nothing, waste of going for support ticket, they give nothing other than redirecting to
this "david" guy
Now, It got me more suspecious, cuz http://www.bshades.eu/userprofile.php?user=david
in that link he is sooo active, but he never replies me why ?
So made a search on Hackforums with key word
"blackshades scam", well I saw plenty of threads on "Disputes section"
Now I am almost sure My suspicion is right, that I am getting scammed,
but there was no way to verify this!!
Well, I found a way, opend a new Outlook account and started sending him email,
guess what, He can not reply my messages, but he can reply to my fake ID with in 10 minutes.
read below the conversation from my fake account used to confirm his scam,
hey man how does this word installer work ?.. i need one of that for my rat send me western union info .. will i have it soon i done the western union transfer ? do you give discount for me on 650 doller ..
Proof PDF Click Here
within no time he replied.
Hello,
Send payment to:
Name: Alex Yucel
Country: Moldova
If you buy within 12 hours then send you get 30 USD discount, so 620 in total.
Kind regards
Proof PDF Click Here
yo man, i hear & see many scam reports form this email ID and Alex.. on hackforums.. what is the garantee you wil give me the product ? i need to go with escrow system or something similar... help me get some faith in you..
Proof PDF Click Here
The real deal is we are Blackshades with tons of customers and I will not out our reputation in danger for few hundred bucks...
If you are serious then you have nothing ro worry about.
What has not reached out to you is the fact that some people don't actually have money (mostly jelous kids) who keep blackmailing us, thinking they can get our products for free.
Another classic way is when they send for example 650 Nigerian $ instead of 650 USD.
There are many other things, but I wont waste my time dealing with such people.
Proof PDF Click Here
It was not hard to catch this scammer, with sufficient proofs, red handed, he replies for everyone but not paid transaction
How about byfrost ? who did transaction on 5th september 2013 and you have never attended him which you left half ? or will you be refunding him ?
His payment proof,
https://blockchain.info/tx/d7d05831db56a...91c0375c04
I don't think he is some kid, I am sure he paid some good brass for you.
what do you say about that ?
Proof PDF Click Here
Now no replies, now he is stuck by my reply from "operation" account.
NOW THAT I AM SURE & CONFIRMED HE IS SCAMMING ME, HE WAS NOT ON VACATION, HE WAS TRYING TO MAKE ME GIVE UP THE MONEY,
Then I replied from my original email account, That i need my money back with in 24 hours, a warning kind of,
Before I go any further, I am giving you 24 hours time, for you to refund me the 5.354 BTC for the following address, which I have paid
14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
If you do not refund my money, 25th hour you will see nice thread of everything what you have done to me, on hackforums.
Proof PDF Click Here
and do not forget, we have not done Nigerian $... I paid you with BTC and I am not some jealousy kid.
unfortunately nobody can fake Bitcoin Blockchain, you might have known that.
not just HF, you do not know what is coming. I need my money back, I wont care what you do then after.
I repeat, you have 23 more hours,
to refund 5.354 BTC to 14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
Proof PDF Click Here
Nothing happend so I am here exibitting what happened to me with Blackshades and how I got scammed,
PM me any questions, I never received my money back on my address,
If you are a hex editing expert, ask for the sample files, I will provide under a condition you should analyze and report the truth.
https://blockchain.info/address/14avKy94...YPX7cp16JP
I need refund bshades team. prove the above link has MY 5.354 Bitcoins. MY MONEY.
Half month struggle, is it really worth ? I got scammed.
Whatever the reason, this team is a bunch of scammers, help me get back my money and kick these scumbags out of good community.
WATCH YOUR STEPS GUYS WATCH YOUR STEPS ; DON'T GET SCAMMED LIKE I GOT SCAMMED.
I paid, and after few days with difficulty, i got the RAT, but there was no free VPN like they mentioned.
however ... this person solved RAT issue,
https://hackforums.net/member.php?action...uid=401421
now comes the real scam from them,
I was using their Blackshades NET RAT. now i found something which caught my attention, on their website
"Word Installer - Over 90% infection rate! (RAT ANYONE, OR YOUR MONEY BACK!)"
once you login on bshades.eu, check http://www.bshades.eu/myservices.php
Proof PDF Click Here
Tired of sending or moving exe-files to other computers? Tired of computers not accepting exe-files?
Blackshades now offers a very unique solution!
Instead of sending or moving your exe-file(s) to other computers, you can now just open a Microsoft Office Word-document and your exe will automatically get installed without any interaction at all. Word Installer is a high quality product, based on a 0-day MS exploit, which allows you to install any exe-file (executable) easily on any Windows based PC having any Microsoft Office version installed.
Enough said! The product is very easy to setup, and you don't need anything else than a ready exe-file to get started. If you can't crypt it, then no worries!
What you will get in order to get started is a simple generator which will ask for your exe-file and a Word document. You will also have the possibility to crypt your exe-file before it generates the output Word document. You may then share the word document with anyone. Once the document is opened on the target PC, your exe will instantly get executed without any notification.
Please note: The price for this product is now 650$. Payment methods will be offered via email and only serious buyers will be accepted!
Purchase Word Installer $650
Payments for this product are processed manually.
If you're interested in this product, then contact us at: [email protected]
once you login on bshades.eu, check http://www.bshades.eu/specialproducts.php#word-exploit
Proof PDF Click Here
I asked him (https://hackforums.net/member.php?action...uid=401421) about my interest in their Doc / Word Exploit.
he replied
"Just send an eemal with thosr questions to [email protected] and he'll help you out with that sir."
Proof PDF Click Here
now I sent "[email protected]" the same message,
Hi,
I have been redirected by your partner " blackshades" from hackforums, I am just going to copy the message here below.
first of all, I am doing good with my blackshades copy.
now, I am interested in binding server with doc file worth 650$
I like to know more information regarding this,
1. is latest .docx file ok ? or will you be copying the contents of .docx file from what I will be providing ? (I need some specific contents of 1 page to be embossed on doc file you generate can it be done ?)
2. if you will be crypting, how long does it stay 100% FUD ? is that included with 650$ ?
3. do you have support if the file gets busted by any AV ? will you be able to get me new doc file ? i meant to ask how confident you are with the length of FUD if you crypt. Can I expect least for 3 months ?
4. Any other restriction / conditions / limitations on this service you are offering ?
5. how long does it take ? to crypt & bind my server with provided doc file ?
these are the questions I have in my mind. Looking forward your reply.
byfrost
Proof PDF Click Here
He replied immediately without much delay,
Hello,
Thank you for contacting us.
1. You will receive a generator where you can generate either .doc or .docx output file.
2. You will get a special crypter incuded with the generator which has been FUD for over 4 months now
and being updated once there is any detection on it.
3. As specified above, the generator will be updated for free of charge during for lifetime.
The document itself has never been detected for over 2 years now, so that's nothing to worry about now.
4. There are no restrictions, other than that we will reserve the right to terminate your account on our
website and not provide updates in case we detect that you've been trying to resell the exploit.
5. The generator generates the outut exploitable document about instantly.
The payment method is Western Union for this kit.
Let me know if you're interested.
Kind regards
Proof PDF Click Here
I replied him again that I am sure i need it, I was never be suspicious that he might scam me,
since I have done BlackShades NET RAT deal with his crew earlier.
Hi, thanks for your quick & accurate reply
I am impressed.
I definitely need the tool.
do you accept bitcoins ? or Western Union is the only available option ?
if bitcoins are ok, send me the BTC wallet
if Western Union is the only option, please provide me necessary information,
if its Western Union, I might take up to 2 to 3 working days for the payment is that fine ?!
waiting for your reply
thank you
byfrost
Proof PDF Click Here
He replied,
Sure, send to: 1Db3k79Gkp32mFXn2nQtDDu9vppQGRkxP5
Use http://preev.com to convert as I use them as exchanger.
Proof PDF Click Here
Without second thought I just sent the coins to him for the wallet he provided. on 5th September
https://blockchain.info/address/1Db3k79G...vppQGRkxP5
Prof of payment: https://blockchain.info/tx/d7d05831db56a...91c0375c04
ok,
5.354 BTC (preev.com Bitstamp exchange value)
has been sent to 1Db3k79Gkp32mFXn2nQtDDu9vppQGRkxP5
please verify and guide me. :)
thank you
byfrost
Proof PDF Click Here
He replied,
Hello,
Do you have TeamViewer? Would be easier to help you install the kit.
Kind regards
Proof PDF Click Here
I was thinking why does this man require Teamviewer ? what is his problem!
ah. Is teamviewer is a must ?
can I try ? ;)
I can install tv in few seconds not a problem though.
if it is a must then i got no choice ?!
thank you
byfrost
Proof PDF Click Here
His reply was suspicious,
I will need to get your HWID details and so for example.
You will also need to install some additional .NET related things...
Proof PDF Click Here
you can get the HWID.exe from bshades.eu website visiting http://bshades.eu/HWID.exe
so i did and sent him the HWID like said below.
my HWID : -995264490 (same as my bshades copy)
yes name me the things, i will install plugins related to .NET ...not an issue.
you can pass me the setup files, I will do it by myself, if in need of any helps I will make sure to pass you the tv codes for immediate help.
thank you.
byfrost
Proof PDF Click Here
The guy never replied me... he put me hanging there for 16 hours, then I sent him a message again.
Here is my payment confirmation
https://blockchain.info/tx/d7d05831db56a...91c0375c04
Here is a proof of you moving the coins
https://blockchain.info/address/1Db3k79G...vppQGRkxP5
I think I did not disappoint you in paying up more coins than standard MTgox rate.
where is my product ? I am still waiting.
byfrost.
Proof PDF Click Here
After 7 hours i received his reply
what the heck, guy took 5.354 Bitcoins from me, and says he is busy ? what an irresponsible professional.
Hello,
Sorry about that. I have been busy with work.
Get me your TV details fast and I'll get on to set it up for you fast.
Kind regards
Proof PDF Click Here
I was totally upset, but did not show that to him,
I needed the product, so sent him teamviewer codes,
ID: 284 319 615
Password: 7h7ha5
It's a mess in my desktop, samples.
Your folder is under Desktop > "bss"
byfrost
Proof PDF Click Here
After this, this guy logged into my machine, and did some drama,
starting conversation and asked me about investing 200 Bitcoins to his company,
I was expecting him to finish the work what he started, i was listening to his ideas,
(I have the chat recorded and saved; in a text file I will be providing it when in need of that, for judge)
(Can also provide, Teamviewer Log files)
He asked me to Remove the present Dot net Framework and told me reinstall, I did as he asked me to do,
he looked HWID, (was the same as i provided)
then he transferred a tiny 16 KB exe file named "wgen.exe".
That did not work, it was showing some Dot Net error..
now he got a reason, that I am running Virtual machine,...
(usually i keep all my such works under encrypted VMware, but this guy is not ok with it,)
fine I provided him my Main Operating system Teamvewer access.
now he did the same thing, he checked HWID and transferred "wgen.exe" 16 KB file
That gave another error, "HWID not supported"
now he gave a reason that his guy wont let him have more products so he will get it built a new one for me,
in 8 hours time, but he never came back, he never even droped me an email,
I am having 2 samples of "wgen.exe" 16KB file which he transferred, both has different MD5 hash,
and when I open with hex editor I see 65% is filled with "00" rest of % has just a error message encoded.
I can provide for any hex expert editor who wants to check those 2 file samples.
This happened on 7th September 2013, you can check the proof PDF files for email header timing to be accurate.
so i started sending him mails again one by one since then, which never got attended or replied,
hi,
it's the time.
if you have missed the codes, here it is.
456 846 675
3583
waiting,..
byfrost
Proof PDF Click Here
I waited long!
If you will be sending me the new wgen file, HWID of the main OS:
-1072969011
see what you can do.
I really wish you could have completed the work before your vacation without me hanging in the middle.
byfrost.
Proof PDF Click Here
hi,
new codes
456 846 675
8468
I am waiting.
byfrost.
Proof PDF Click Here
Hi Mr.David,
I remember now, that you are on a vacation which you have already mentioned, since you can read my message on your phone like you said, it will be way better for me to expect you rather waiting for you all day to log in on tv.., if you can tell me some specific time when you be able to get back to my desktop on tv and fix the work which is left in the middle.
So, if you reply me the day & time (UTC) to resume the work, I will highly appreciate it.
and about our investment talks, I am stable, but we must improve our understandings with each other. You know what I mean,
looking for your quick reply & firm timing.
byfrost
Proof PDF Click Here
hello,
please tell me, when will you be completing the work you left in the middle ?
I am waiting.
byfrost
Proof PDF Click Here
hi,
I understand you are a busy man. I appreciate it. but right now,
I am waiting the started work to be complete. If the fault on my side, I am ready to add 2 BTC extra, so it will be 1000$
...but please finish the job. contact me. don't leave me hanging here,
thank you.
byfrost
Proof PDF Click Here
Sooo many emails, from 7th September till 9th September I got no replies, none = none.
(accurate times are recorded inside PDF proof of email print copy)
I opened a support ticket on bshades.eu and i had no luck,
the crew members kept on asking me to contact "[email protected]"
-------------------
Posted by: You
September 9th, 4:35 PM
Hi,
I would like to contact Mr. David, I am waiting for him to log in to my desktop and fix the doc Exploit which setup the half way (on Saturday).
payment done on 4th.
thanks a lot.
-------------------
Posted by: stevmager
September 9th, 6:21 PM
You should email [email protected] for this.
Rate this reply:
-------------------
Posted by: You
September 9th, 6:28 PM
yes, i did. last 7 of my emails, unanswered, he told me that he will get back in 5 to 6 hours, leaving the work half on my desktop,
but then i did not hear from him its been 2 days so just opened a ticket!
any idea what time he will be free ? i mean to setup, I am a customer. not freebie.
thanks for your reply.
-------------------
Posted by: d0s3s
September 9th, 10:17 PM
There is nothing much we can do here, that product is exclusively handled by David.
Please email "[email protected]".
-------------------
Proof PDF Click Here
now I created a new email, with a new topic and sent him, on 9th September
Hi,
I need some replies from you, I cant be left out hanging here with half work.
I see you are active on main site, your crew wont support me since you are the only handling this thing.
I am not asking you for free setup, why not you finish the job which you left in the half ? why you are not replying me ?
you told me that you will get back in 5 to 6 hours, you did not make it up. at least you could have replied me.
at least you can tell me what is the problem ? If you are not in a position or in a tour just tell me the day i can expect you.
I am a customer, david. I am a prompt business man, but you are an expert developer, I need some answers,
I need the product. I need it to be setup. tell me when it can be done.
Not really a good treatment for a genuine & serious customer.
byfrost
Proof PDF Click Here
good, finally he replied, but guess what, soo irresponsible very unprofessional answer
and a lame reason/execuse, i was waiting all night till without sleep for this guy to do his work,
he never logged and gives a reason that password of teamviewer was changed, what the heck ?
Sir, I'm out of country and can't be dealin with these things from over here...
Hope you understand what I mean.
I will be back in 1-2 weeks. I was trying to get on your TV before but the pass was changed...
Proof PDF Click Here
I replied him back, that I need it to be set up, which he left his work in half,
I know you are a man who is capable of making things happen.With all do respect, Please do something, with in a week.
byfrost
Proof PDF Click Here
And Again no replies, :( i thought it is his nature being sooo much un-professional, so i decided to wait
on his time line what he mentioned me that 1 to 2 weeks,
I was frequently checking his activity, he never seemed like he is on a vacation on his activity link
check this link after logging to bshades.eu http://www.bshades.eu/userprofile.php?user=david
So, i gave some break, on 21st AFTER 16 DAYS of payment, I started sending him messages,
Hi,
I have done my payment for word exploit on 5th of this month, and you have left the work half and told me to wait 1 to 2 weeks, it's already 16 days passed and is 21st September.
Here, is my teamviewer codes, please finish the job what has been started.
456 846 675
3817
Thank you
byfrost
Proof PDF Click Here
Hello Sir,
I have done my payment without any delay, promptly,
I do not know why I deserve a longest waiting for my product even after doing my payments promptly,
I still do not have the product, which I am sad about.
Please setup my product, the 2 weeks time you told me to wait is over few days ago, I am still waiting,
Please respond me. please tell me when will you get me the product set up ?
Thank You
byfrost
Proof PDF Click Here
hello sir,
please refund my 5.354 BTC to 14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
thank you
byfrost
Proof PDF Click Here
Another, bshades.eu ticket
--
osted by: You
September 21st, 9:01 PM
david / alex is absconding, i am not hearing from him, he never replies me, but if you reply from fake accounts, he will reply,
my payment proof,
https://blockchain.info/tx/d7d05831db56a...91c0375c04
done on 5th september 2013.
who is responsible for this / please get my product.me which i have paid for
or refund me the same 5.354 BTC to 14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
--
Posted by: stevmager
September 21st, 9:25 PM
You will get contact via email.
Rate this reply:
--
Posted by: You
September 21st, 9:29 PM
I am very Sorry I did not understand it clearly,
I have emailed him so many times, I received no replies, still are you suggesting me to email him ? please correct me if I am wrong.
Please provide me my product or a refund.
--
Proof PDF Click Here
Proof PDF Click Here
These crew members are doing nothing, waste of going for support ticket, they give nothing other than redirecting to
this "david" guy
Now, It got me more suspecious, cuz http://www.bshades.eu/userprofile.php?user=david
in that link he is sooo active, but he never replies me why ?
So made a search on Hackforums with key word
"blackshades scam", well I saw plenty of threads on "Disputes section"
Now I am almost sure My suspicion is right, that I am getting scammed,
but there was no way to verify this!!
Well, I found a way, opend a new Outlook account and started sending him email,
guess what, He can not reply my messages, but he can reply to my fake ID with in 10 minutes.
read below the conversation from my fake account used to confirm his scam,
hey man how does this word installer work ?.. i need one of that for my rat send me western union info .. will i have it soon i done the western union transfer ? do you give discount for me on 650 doller ..
Proof PDF Click Here
within no time he replied.
Hello,
Send payment to:
Name: Alex Yucel
Country: Moldova
If you buy within 12 hours then send you get 30 USD discount, so 620 in total.
Kind regards
Proof PDF Click Here
yo man, i hear & see many scam reports form this email ID and Alex.. on hackforums.. what is the garantee you wil give me the product ? i need to go with escrow system or something similar... help me get some faith in you..
Proof PDF Click Here
The real deal is we are Blackshades with tons of customers and I will not out our reputation in danger for few hundred bucks...
If you are serious then you have nothing ro worry about.
What has not reached out to you is the fact that some people don't actually have money (mostly jelous kids) who keep blackmailing us, thinking they can get our products for free.
Another classic way is when they send for example 650 Nigerian $ instead of 650 USD.
There are many other things, but I wont waste my time dealing with such people.
Proof PDF Click Here
It was not hard to catch this scammer, with sufficient proofs, red handed, he replies for everyone but not paid transaction
How about byfrost ? who did transaction on 5th september 2013 and you have never attended him which you left half ? or will you be refunding him ?
His payment proof,
https://blockchain.info/tx/d7d05831db56a...91c0375c04
I don't think he is some kid, I am sure he paid some good brass for you.
what do you say about that ?
Proof PDF Click Here
Now no replies, now he is stuck by my reply from "operation" account.
NOW THAT I AM SURE & CONFIRMED HE IS SCAMMING ME, HE WAS NOT ON VACATION, HE WAS TRYING TO MAKE ME GIVE UP THE MONEY,
Then I replied from my original email account, That i need my money back with in 24 hours, a warning kind of,
Before I go any further, I am giving you 24 hours time, for you to refund me the 5.354 BTC for the following address, which I have paid
14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
If you do not refund my money, 25th hour you will see nice thread of everything what you have done to me, on hackforums.
Proof PDF Click Here
and do not forget, we have not done Nigerian $... I paid you with BTC and I am not some jealousy kid.
unfortunately nobody can fake Bitcoin Blockchain, you might have known that.
not just HF, you do not know what is coming. I need my money back, I wont care what you do then after.
I repeat, you have 23 more hours,
to refund 5.354 BTC to 14avKy94d6BFxTvJd9HZrM43YPX7cp16JP
Proof PDF Click Here
Nothing happend so I am here exibitting what happened to me with Blackshades and how I got scammed,
PM me any questions, I never received my money back on my address,
If you are a hex editing expert, ask for the sample files, I will provide under a condition you should analyze and report the truth.
https://blockchain.info/address/14avKy94...YPX7cp16JP
I need refund bshades team. prove the above link has MY 5.354 Bitcoins. MY MONEY.
Half month struggle, is it really worth ? I got scammed.
Whatever the reason, this team is a bunch of scammers, help me get back my money and kick these scumbags out of good community.
WATCH YOUR STEPS GUYS WATCH YOUR STEPS ; DON'T GET SCAMMED LIKE I GOT SCAMMED.
![[Image: TUbWGwN.gif]](https://i.imgur.com/TUbWGwN.gif)
