I have never used my RAT for malicious purposes, and I have never infected anybody. I sent my RAT over skype to my friend, for testing purposes. I keep getting random infections, but weird PC`s. Running windows, they have nothing in them. Nothing in the desktop, no downloaded programs. I can`t access their desktops, and they have no mic/camera. Keylogged, no activity. They are classified weird, like placehol-69969 and pc/admin and stuff. What is this?
Random infections... |
 (Nov 20, 2015 10:32 PM)yosefebesh Wrote: I have never used my RAT for malicious purposes, and I have never infected anybody. I sent my RAT over skype to my friend, for testing purposes. I keep getting random infections, but weird PC`s. Running windows, they have nothing in them. Nothing in the desktop, no downloaded programs. I can`t access their desktops, and they have no mic/camera. Keylogged, no activity. They are classified weird, like placehol-69969 and pc/admin and stuff. What is this? The likely correct answer to this is the fact, your subject/friend/whoever, sent it to a site, or ran an anti virus which distributes samples. - As stated these are likely honeypots, they will rather information but are unlikely to remain within the network. 🤝 (Nov 20, 2015 10:40 PM)Armada Wrote: The likely correct answer to this is the fact, your subject/friend/whoever, sent it to a site, or ran an anti virus which distributes samples.Oh, He's rigt infront of me, irl. (Nov 20, 2015 11:46 PM)ℛoot Wrote: Don't Use skype to send servers. was an uncrypted test stub. Thanks for the tip though. (Nov 20, 2015 11:49 PM)ℛoot Wrote: Even if its crypted just don't use it :) Yeah thanks for the tip man. I got a question about a certain spreading method (PM'ing!!) that I'm going to have to modify... (Nov 20, 2015 11:55 PM)yosefebesh Wrote: Yeah thanks for the tip man. I got a question about a certain spreading method (PM'ing!!) that I'm going to have to modify... If you have PHYSICAL access to the terminal at ANY point why not utilize that vector? Throw your "attack" on the usb and plug and play (Nov 21, 2015 12:10 AM)Armada Wrote: If you have PHYSICAL access to the terminal at ANY point why not utilize that vector?The problem is I was only willing to project a stub test on my friends computer, not a complete-fledged attack. (Nov 21, 2015 12:44 AM)yosefebesh Wrote: The problem is I was only willing to project a stub test on my friends computer, not a complete-fledged attack. IMO you have no concept of a targeted attack, but ok, t each their own 🤝 |
|
|
