DO NOT DEAL WITH THIS MEMBER
Sep 14, 2016 06:08 AM
(This post was last modified: Sep 14, 2016 06:24 AM by Exchanged.)
This user: https://hackforums.net/member.php?action...id=3252996
is trying to rat me, and possibly other HF Members.
Here is a screenshot of a pm he sent me.
![[Image: 064352c0060fc90f2a1fa799679a6285.png]](https://i.gyazo.com/064352c0060fc90f2a1fa799679a6285.png)
Just be careful out there. And don't get scammed by him.
He got 19 posts, 0 rep, and L33T.
He was even looking for native rats lol. And now he sending me this "native" Rat.
Virus scans:
The Installation file: https://www.virustotal.com/da/file/2548d.../analysis/ 32/57
The .rar File: https://www.virustotal.com/da/file/179fc...473859362/ 28/56
DO NOT DEAL WITH THIS MEMBER
Sep 14, 2016 06:10 AM
(This post was last modified: Sep 14, 2016 06:15 AM by LastSession.)
DO NOT DEAL WITH THIS MEMBER
Sep 14, 2016 06:15 AM
(This post was last modified: Sep 14, 2016 06:16 AM by Exchanged.)
(Sep 14, 2016 06:10 AM)LastSession Wrote: Well did you scan his file?
Gonna do it now. (99% its a RAT), and that link he sent me is a LF link. And on there, u can see there is a link. But i will download now and put virus scan.
(Sep 14, 2016 06:10 AM)LastSession Wrote: https://hackforums.net/showthread.php?tid=5405383 lol
ye ikr.
DO NOT DEAL WITH THIS MEMBER
(Sep 14, 2016 06:15 AM)Exchanged Wrote: Gonna do it now. (99% its a RAT), and that link he sent me is a LF link. And on there, u can see there is a link. But i will download now and put virus scan.
Dude I wouldn't be that sure. I think it's just a desperate multi from LF.
DO NOT DEAL WITH THIS MEMBER
(Sep 14, 2016 06:16 AM)LastSession Wrote: Dude I wouldn't be that sure. I think it's just a desperate multi from LF.
Scans Posted.
Well it is a RAT. Wouldn't be 0/35 detection. But it does probably have a RAT.
DO NOT DEAL WITH THIS MEMBER
(Sep 14, 2016 06:28 AM)Riyu Wrote: Well it is a RAT. Wouldn't be 0/35 detection. But it does probably have a RAT.
Pretty much this OP. I mean why he should recommend LF when he wants to spread his RAT here?
DO NOT DEAL WITH THIS MEMBER
Thanks for the heads up dude.
DO NOT DEAL WITH THIS MEMBER
(Sep 14, 2016 06:28 AM)Riyu Wrote: Well it is a RAT. Wouldn't be 0/35 detection. But it does probably have a RAT.
(Sep 14, 2016 06:29 AM)LastSession Wrote: Pretty much this OP. I mean why he should recommend LF when he wants to spread his RAT here?
Imminent Monitor Scanned: https://www.virustotal.com/da/file/3b4e4...473859798/
The RAT the guy is spreading:
https://www.virustotal.com/da/file/2548d.../analysis/
And just like by looking at the Results u can see the RAT the guy is spreading is a actual Rat.
DO NOT DEAL WITH THIS MEMBER
(Sep 14, 2016 06:33 AM)Exchanged Wrote: Imminent Monitor Scanned: https://www.virustotal.com/da/file/3b4e4...473859798/
The RAT the guy is spreading:
https://www.virustotal.com/da/file/2548d.../analysis/
And just like by looking at the Results u can see the RAT the guy is spreading is a actual Rat.
Well I guess he uploaded the cracked version.
Someone else should take a look into these scans. can't judge that.
He got rep killed i think.
DO NOT DEAL WITH THIS MEMBER
(Sep 14, 2016 06:37 AM)Rezy Wrote: He got rep killed i think.
I don't think so. He just didn't receive a positive reputation yet.
DO NOT DEAL WITH THIS MEMBER
Ill try it on Vmware when I have time, found similar thread on LF with screens, however the people posting positive things there have like no posts
not into going into argue with anyone, maybe hes spreading malware, thats one option, and second possible is that he spreads his legit rat and wants to make it famous
screens really look legit
op you should consider making a site so it looks more legit
Okay, but did you give him a reason to even PM you about a RAT in general? Did you ask for a RAT in the RAT'ing section, etc?
DO NOT DEAL WITH THIS MEMBER
(Sep 14, 2016 11:26 PM).Astro Wrote: Okay, but did you give him a reason to even PM you about a RAT in general? Did you ask for a RAT in the RAT'ing section, etc?
I didnt ask for a RAT. I only asked for problems with Portforwarding.
|
