Spoof Call and Spoof SMS set any caller ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Blackhat Training Reverse Engineering › Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens

New Reply 

Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens
resetti
resetti Offline
smokin' bones on the polar express
**
HF l33t
Posts:
192
Threads:
4
Credibility:
300
Popularity:
47
βytes:
β 301
Game XP:
53
Nov 17, 2023 02:44 AM (This post was last modified: Nov 17, 2023 03:30 AM by resetti.)
Recently I came across some malware on Telegram, the file was released with the caption: “i will be using my private stealer for #opisrael, message me to help it spread”. This blog shows the world of Stealer-as-a-Service markets, and political hacktivism within Telegram against Israel, and some deep analysis of a very noisy piece of malware!

If you're interested in reading. Here is the link: https://0xresetti.github.io/palestine-fr...paign.html

I also have some other posts if you're interested, but this is my most recent one and I thought id share it with you guys.
Mr. Resetti? I thought this motherfucker was still smokin' bones on the Polar Express

Discord: fuckaslr

Click me to see about my Reverse Engineering service!
Sofiya1a
Sofiya1a Offline
[closed@HF:]
Posts:
7
Threads:
0
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 17, 2023 03:19 AM
thank you friend for this post
Tentco
Tentco Offline
[exiled@HF:]
*
Posts:
677
Threads:
14
DO NOT DEAL WITH THIS MEMBER
βytes:
β 43.4
Game XP:
93
Nov 17, 2023 08:33 AM (This post was last modified: Nov 17, 2023 08:43 AM by Tentco.)
(Nov 17, 2023 02:44 AM)resetti Wrote:  Recently I came across some malware on Telegram, the file was released with the caption: “i will be using my private stealer for #opisrael, message me to help it spread”. This blog shows the world of Stealer-as-a-Service markets, and political hacktivism within Telegram against Israel, and some deep analysis of a very noisy piece of malware!

If you're interested in reading. Here is the link: https://0xresetti.github.io/palestine-fr...paign.html

I also have some other posts if you're interested, but this is my most recent one and I thought id share it with you guys.

There are tons of like these open-sourced on github what's funny is that they haven't used any sort of obfuscation(considering the dropper is in node-js) neither packing through nexe or NSIS the screenshot method of dropping .ps1 is generic too, I would like you to send me the sample through convo, I would like to release one analysis of my own here.
Great analysis.
Thanks.
Mnemonic
Mnemonic Offline
[closed@HF:]
Posts:
268
Threads:
17
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 17, 2023 10:51 AM
Very interesting share and I found the site content to be entertaining as well.
resetti
resetti Offline
smokin' bones on the polar express
**
HF l33t
Posts:
192
Threads:
4
Credibility:
300
Popularity:
47
βytes:
β 301
Game XP:
53
Nov 20, 2023 07:26 AM
(Nov 17, 2023 08:33 AM)Tentco Wrote:  There are tons of like these open-sourced on github what's funny is that they haven't used any sort of obfuscation(considering the dropper is in node-js) neither packing through nexe or NSIS the screenshot method of dropping .ps1 is generic too, I would like you to send me the sample through convo, I would like to release one analysis of my own here.
Great analysis.
Thanks.

Sure, PM me on telegram: https://t.me/fuckaslr
Mr. Resetti? I thought this motherfucker was still smokin' bones on the Polar Express

Discord: fuckaslr

Click me to see about my Reverse Engineering service!
Tentco
Tentco Offline
[exiled@HF:]
*
Posts:
677
Threads:
14
DO NOT DEAL WITH THIS MEMBER
βytes:
β 43.4
Game XP:
93
Nov 20, 2023 07:28 AM
(Nov 20, 2023 07:26 AM)resetti Wrote:  Sure, PM me on telegram: https://t.me/fuckaslr

Can you send me the link in HF's convo?
I am not active on telegram yet.
Puppetmaster
Puppetmaster Offline
[closed@HF:]
Posts:
105
Threads:
7
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 25, 2023 08:29 AM
use jabber instead of using telegram
resetti
resetti Offline
smokin' bones on the polar express
**
HF l33t
Posts:
192
Threads:
4
Credibility:
300
Popularity:
47
βytes:
β 301
Game XP:
53
Dec 25, 2023 08:49 AM
(Dec 25, 2023 08:29 AM)Puppetmaster Wrote:  use jabber instead of using telegram

I use both.
Mr. Resetti? I thought this motherfucker was still smokin' bones on the Polar Express

Discord: fuckaslr

Click me to see about my Reverse Engineering service!
Azeta
Azeta Offline
[closed@HF:]
Posts:
51
Threads:
4
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Nov 25, 2024 10:19 PM
Interesting post. Would have to look into it.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Moti MotiNov 25, 2024 11:16 PM 7 549 Nov 25, 2024 11:16 PM
Last Post: Azeta