51–60 of 108 posts
Thanks to domaintools.com - I also found that the guy (seemaexports3@gmail.com) used to own domain: bdmtsteel.com I also find similarities between above domain and these: transitoin-asia.com seabunker.net See this: http://imgur.com/tsxqwiQ If someone wants to do more research - would be fun to dig deeper.
Thanks to domaintools.com - I also found that the guy (seemaexports3@gmail.com) used to own domain: bdmtsteel.com I also find similarities between above domain and these: transitoin-asia.com seabunker.net See this: http://imgur.com/tsxqwiQ If someone wants to do more research - would be fun to dig deeper.
Good research. Can I ask what you used to make that graphic?
Earlier quoted context omitted.
Good research. Can I ask what you used to make that graphic?
I'd also like to know the answer to this question! :)
I love domaintools as it allows to find anything by anything. Like domains (current and historical) by email, or even by fragment of registrant information, such as by phone number or by zip code.
Earlier quoted context omitted.
as for the first point, yup, I understood that from the article; I probably should have used "similar to Steam" rather than "like Steam". I mostly meant, you'd get a long stream of characters and you'd have to manually try to dejumble them. Whereas, I believe if you go by your second point, you can see "Ok, the user put username in the username textfield, password in the password field, address in the address textfie…
Most of them usually show specifics, the keylog file is often less of a jumble and more of like: {TAB}{TAB}{CURRENT WINDOW: Steam - Log in}{TAB}username{LEFTCLICK}password{LEFTCLICK}{CURRENT WINDOW CHANGED: Steam: Home}
a few questions I'm wondering about, if anyone can help: - how do those PW stealers work? are they similar to the Steam one, where it'd delete existing creds and then sniff newly entered ones? - can this thing detect certain apps like FileZilla and then say "user entered " and send individual fields, and is that what is meant by supporting say FTP and FileZilla? - what does PHP support mean? maybe looks for common st…
> can this thing detect certain apps like FileZilla and then say "user entered " and send individual fields, and is that what is meant by supporting say FTP and FileZilla? Could well be. I haven't messed with Win32 in a while, but I'm pretty sure that you can sniff the contents of other applications' windows and dialogs. With a little work, you should be able to take a common app and work out how to detect it's login…
> It also attempts to steal password manager credentials and Windows keys. Ugh I hate reading this. I keep everything in my password manager. If I lose that I'm hosed. I wish more sites supported 2FA.
or had no authentication at all, just authorization. imagine having only a openid password to memorize... one can dream right
Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things o…
I just hope someday the general public realize what a poor job Microsoft has done regarding security on Windows operating systems and embrace other (and more promising) alternatives
broadly speaking, how would you design things? All I can think of doing is putting explicit permission grants on everything, requiring everyone to click a million times as was done with the first version of Vista's UAC, IIRC, which is no solution IMO.
Come on, you're talking about the biggest and one of the oldest technological conglomerates on earth. They could fix the ecosystem if they wanted. But since they dont care about users, they'll wait till google does it for them and then sue over IP rights
Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things o…
These days I'd be worried about CFAA or otherwise getting V& for this. In the "good old days", it was possible to get away with and laugh about this type of vigilante justice. These days though, you're more likely to wind up in prison. No longer worth it for lulz. Sad times now, but good memories.
Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things o…
I’ve had a very similar experience – I’m surprised I’m not the only one who did that. I’d have expected the DDoSers to have better security
And that's for the people actually hosting the botnet or "booter" (which seems to be what the parent poster found). Most of the time, it's one more layer down: just some kids paying for the right to enter an IP to DDoS temporarily.