Oct 5, 2016 01:45 PM
(This post was last modified: Oct 5, 2016 02:00 PM by tooleytoks.)
This 'story' is totally fictional... 🙃
* This story makes good use of Visual Basic (VB.net)
Okay, so the title is very self explanatory. This is about how I stole usernames & passwords from people with them having no knowledge at all. It was so basic that it was almost advanced, bad explanatory but yeah. Anyway, this was not flagged in any way by any Anti-Virus software, due to the nature of the 'virus'
I wouldn't like to call it a virus, as it isn't really. Its a simple .exe file which runs a script which runs another script which steals user data. Soooo, yeah not really a 'virus'
Okay so how did I do it?
Step1, I downloaded the application Browser Password Dump which is a standalone .exe to retrieve all Saved passwords from multiple browsers.
Step2, I made a fake but convincing application (I won't disclose what it was) & made a video all about it to post online
Step3, I made another silent .exe file that runs browser password dump (by this point I re-named it to BPD.exe)
Step4, I made the application force BPD to dump a plain file (no extension just blank) to the 'settings file of the other application i made) with a list of retrieved passwords
Step5, I made the second application wait approx 10 seconds and then import the file of passwords into a rich text box within the application itself
Step6, Then a web browser navigates to a weebly site (yes a weebly site) with just a form on it which I created.
Step7, on the timers tick it would take the text from the rich text box and add it to the form in the web page & submit it
Step8, The application would open a batch file, which kills this application and then deletes the .exe file leaving no evidence
step9, I check the received data and save the text to a file & now all that users information is mine...
This whole 'operation' was so basic & so easy to do, that's why I believe it to be so effiicent and un-detectable from Anti-Virus programs
To cover up some stuff I mentioned earlier:
1- The fake .exe I made (lets call it exe1) was a real application that would function and do stuff, I made a folder where the .exe1 was called settings and added lots of real looking application info (settings, logs etc)
2- To launch exe2 I made a batch file in the same directory as exe1 which would simply launch the exe2
3- I used a weebly site as it was super simple to make and took a few minutes, apposed to setting up a server or something along the lines of that...
**If you want in-depth details just message me on here, I'll be happy to help
* This story makes good use of Visual Basic (VB.net)
Okay, so the title is very self explanatory. This is about how I stole usernames & passwords from people with them having no knowledge at all. It was so basic that it was almost advanced, bad explanatory but yeah. Anyway, this was not flagged in any way by any Anti-Virus software, due to the nature of the 'virus'
I wouldn't like to call it a virus, as it isn't really. Its a simple .exe file which runs a script which runs another script which steals user data. Soooo, yeah not really a 'virus'
Okay so how did I do it?
Step1, I downloaded the application Browser Password Dump which is a standalone .exe to retrieve all Saved passwords from multiple browsers.
Step2, I made a fake but convincing application (I won't disclose what it was) & made a video all about it to post online
Step3, I made another silent .exe file that runs browser password dump (by this point I re-named it to BPD.exe)
Step4, I made the application force BPD to dump a plain file (no extension just blank) to the 'settings file of the other application i made) with a list of retrieved passwords
Step5, I made the second application wait approx 10 seconds and then import the file of passwords into a rich text box within the application itself
Step6, Then a web browser navigates to a weebly site (yes a weebly site) with just a form on it which I created.
Step7, on the timers tick it would take the text from the rich text box and add it to the form in the web page & submit it
Step8, The application would open a batch file, which kills this application and then deletes the .exe file leaving no evidence
step9, I check the received data and save the text to a file & now all that users information is mine...
This whole 'operation' was so basic & so easy to do, that's why I believe it to be so effiicent and un-detectable from Anti-Virus programs
To cover up some stuff I mentioned earlier:
1- The fake .exe I made (lets call it exe1) was a real application that would function and do stuff, I made a folder where the .exe1 was called settings and added lots of real looking application info (settings, logs etc)
2- To launch exe2 I made a batch file in the same directory as exe1 which would simply launch the exe2
3- I used a weebly site as it was super simple to make and took a few minutes, apposed to setting up a server or something along the lines of that...
**If you want in-depth details just message me on here, I'll be happy to help
