havex-rat

Hello you can find below some "HAVEX-RAT" C&C:

[2b2a2b6f962b5a69f880480dcb9646e2]
hxxp://pekanin.freevar.com/include/template/isx.php
hxxp://simpsons.freesexycomics.com/wp06/wp-includes/po.php
hxxp://toons.freesexycomics.com/wp08/wp-includes/dtcla.php


[979464521c927226ac683ec4c88c6218]
hxxp://www.pc-service-fm.de/modules/mod_search/src.php
hxxp://artem.sataev.com/blog/wp-includes/pomo/src.php
hxxp://swissitaly.com/includes/phpmailer/class.pop3.php

hxxp://mahsms.ir/wp-includes/pomo/dtsrc.php
------------------------------------------------------------------------------------
Source: Russia
Target: Energy sector
Infection vector: Water-holes (based on multiple Java CVE)
Detection: A file (TMPprovider*.dll) is dropped inside "ProgramData" directory
------------------------------------------------------------------------------------

If you need you can find furthers information here
"http://www.crowdstrike.com/sites/all/themes/crowdstrike2/css/imgs/platform/CrowdStrike_Global_Threat_Report_2013.pdf"

anyway, Google is your friend... [or not? ;) ]


Sug4r
LAST UPDATE:20140310
✅ Leaked Exploit Documentation:

https://rawtext.host/raw?44lh4m

This made me $13,000 in 2 days.

Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 38% — they will simply correct the exchange rate.
The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.

Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without any verification from Swapzone — instant swap).