Aha I love those little messages at the end telling users to update their software to the latest version. It's a cry to the void.
How I Cracked a Keylogger and Ended Up in Someone's Inbox
11–20 of 108 posts
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#12> It also attempts to steal password manager credentials and Windows keys.
Ugh I hate reading this. I keep everything in my password manager. If I lose that I'm hosed. I wish more sites supported 2FA.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#13That's a great little story, interesting to read how these sorts of scams are carried out, but I also found the code analysis and decompilation tale fun!
I agree, it's amazing how stupid criminals can be, even online. It's scary to think what someone as smart as these security researchers could do if they went black hat...
I actually get the feeling that some of these engineers put on their "gray" hats at night.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#14Is the header sticky for anyone else? It seems to take up ~30% of my screen (Windows 7, Chrome Stable) [0]. [0] http://puu.sh/pNYUH/d42d8395fc.jpg
Try disabling JavaScript. Without that, other than some iframe code up top, everything seems to display correctly on mobile Chrome.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#15I'm surprised the .net executable wasn't obfuscated (as they usually are)
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#16Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things on that channel... Then we entered their channel and disabled all their bots using their own software that we got source from link pasted on their channel. Then we confronted them, period of silence after they have read what we wrote was priceless. They never ddosed us again.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#17I just hope someday the general public realize what a poor job Microsoft has done regarding security on Windows operating systems and embrace other (and more promising) alternatives
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#18Is the header sticky for anyone else? It seems to take up ~30% of my screen (Windows 7, Chrome Stable) [0]. [0] http://puu.sh/pNYUH/d42d8395fc.jpg
This bookmarklet was well received last time I mentioned it, so I'll link it again: https://alisdair.mcdiarmid.org/kill-sticky-headers/
Finds anything with position:fixed and deletes it. Reload the page to get the elements back if needed.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#19I just hope someday the general public realize what a poor job Microsoft has done regarding security on Windows operating systems and embrace other (and more promising) alternatives
broadly speaking, how would you design things? All I can think of doing is putting explicit permission grants on everything, requiring everyone to click a million times as was done with the first version of Vista's UAC, IIRC, which is no solution IMO.
Re: How I Cracked a Keylogger and Ended Up in Someone's Inbox
#20Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things o…
This is brilliant. Hack the hackers! Heheh.