Armada Spread Method

Hack Forums
Armada Spread Method (Insert Various randomized high value number here)

+- Hack Forums (http://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (/forumdisplay.php?fid=45)
+--- Forum: Hacking Tools and Programs (/forumdisplay.php?fid=10)
+---- Forum: Remote Administration Tools (/forumdisplay.php?fid=114)
+---- Thread: Armada Spread Method (Insert Various randomized high value number here) (/showthread.php?tid=4966514)

Armada Spread Method (Insert Various randomized high value number here) - Armada - 08-28-2015 12:02 AM

Ok, so I say it time and time again to people who ask, but as some may have noticed when it comes to spreading, I dont usually give out "Tips" other than the generic advice. There is a reason for this. Why? Well simple, I dont want all of YOU ass hats fucking my methods of spreading up on me.

BUT, Every now and again, we gotta share and share alike. So today I am going to walk you through the simplest and easiest way to get a boat load of slaves with minimal wok required.

But, we gotta setup first, right? Black Hat Right.

Requirements:
Reliable stable RAT
A couple existing slaves (for their social media accounts, facebook, instagram etc)
Functional knowledge of "masking" malware to look like something else.
ability to use google images or another site for icons.

So the premise for this type of spreading campaign is pretty straight forward TBH.
In my Targeted Spreading guide, I discuss the different "classes" of computer users.
- In this write up we will be targeting the "Home or Workstation" Classification of machines.

- This is a "Themed" based type of masking, meaning as saturated as I am sure this will soon become it is universal, and over 15 years of doing this has yet to fail on me. (So some might argue this is a known technique) - But its the "craftsmanship" you place in to your efforts that makes it pay off.

OK ȺʁɱªÐą Shut up, whats the scoop here?

Ok. We are going to start by picking the theme.
we need the current popular BS thats a hot seller for kids at the current time you wish to do so. at time of writing this, its all about the Minions
[Image: minions-2.png]

Now that we have our theme, we want to market this gibberish to the "Soccer Mom" class of users. We are talking the parents who are either too busy or simply dont know any better than to check the stuff on their computer.

So in our example we are going to market a "Minions Movie Screen Saver" - Free of course. Because who does not like free?. Roflmao
- Point of note, sometime charging a MINIMAL amount makes it look more legit, but you get less installs. However, file remains FUD longer, as it gets distributed less. Black Hat

Basics:
Build your RATs Binary
Encrypt the RAT Binary

Masking:
Find topiclly related image
convert to appropriate Icon sizing (*.ico)
Using Resource Hacker (NOT the Crypters icon changer!) you will now change the Encrypted Binarys Icon and Assembly information.
-- This MUST be done in Resource Hacker, using other programs tends to cause the AVs to flag the file off. Newer heuristics are checking for "forged" assembly information now  Glare (F$*%g c#$k goblins)

At the end of all of this you should have a file that is a binary and has a topiclly related icon.

- RENAME THE FILE TO .SCR - Its a "Screen saver", right?
- Thats right, no spoofing of BS here, were outright marketing a viral binary, and yes I did even suggest charging people money for it.

Marketing the binary:
Remember those social network passwords I said we needed, and the reason you need a few slaves already?
Here is why.

We are now going to utilize other peoples accounts to manually post our malware. We are going to use their accounts, search out the topical content on facebook, twitter, instagram, etc and spam the fuck out of the social groups.

BUT FIRST! Our malware needs a home to reside.

*Cough* https://pop.co *Cough*

Create a website that advertises the malware in a believable fashion.

!!WARNING!! Spoiler contents links to malware, DO NOT DOWNLOAD FILES FROM THE SITE - You have been warned. !!WARNING!!
Spoiler (Click to View)

As users will note. The site is simple yet direct. The navigational areas have been intentionally thinned out to prevent users from "navigating away" from the intended malware link (In this case, the screen savers DOWNLOAD NOW option on the main page.)

Now, go my Minions, spread the link across social media, hitting as many diferent social groups on facebook and other chats. - Utilizing the users OWN social networks as well. (If they belong to a local mom swap group, for example)

Craft your post to be a "real post" but something you can use as a base script to simple copy and paste (this speeds the spread time up)

Code:
"Hey folks, I absolutely love this movie <3 #MINIONSFOREVER  I found an awesome screen saver for the movie, its cute, I sit here sometimes just watching it. hehe.  If anyone is interested I found it here: http://www.malwaresite.xxx
- Its free too!"
- Simple
- Generic, but something someone WOULD write
Zen.

??????

Sit back, crack a beer, and wait, watching as the slaves come rolling on in. Black Hat

Now stop asking for spreading techniques, its CLEARLY not rocket science, where did everyone's creativity go?

OLD MAN RANT
Back in my day we didn't have these fancy video games, we played 2 bit PONG, you ever heard of that game sonny? We got really excited when FROGGER and PITFALL came out. We moved up to the fantastical world of 8 bit gaming. etc.. rabbles off on some random tangent......

* - Hamware - 08-28-2015 12:06 AM

Awesome simple method mate, loving your contribution to the section. Love you.

* - Armada - 08-28-2015 12:25 AM

(08-28-2015 12:06 AM)Hamware Wrote: ►Awesome simple method mate, loving your contribution to the section. Love you.

Thanks. I understand how people starting out can find spreading difficult, it will forever be one of those aspects that will remain a challenge for any malware controller. Its an ever evolving challenge, however as I noted this is a technique I have personally used for nearly 15 years and it remains good to this day. (Modifications have happened of course)

This is an excerpt from a more complete thorough write up to a book I am in the works of Publishing. Black Hat

* - Paul Wilson - 08-28-2015 02:38 AM

Thanks for this spreading method mate, really nice, I wish I had a malware to spread but mine is still in development and I can't afford a crypter ;(

appreciate it Black Hat

* - that_jonix - 08-28-2015 03:08 AM

thanks for this nice spreading methode youre a big part of the Rat section :)

* - Shards - 08-28-2015 03:16 AM

Amazing! Thank for not selling it, can really help people out!

* - sudoaptgetusr - 08-28-2015 04:38 AM

I've been wanting to do something silmilar for a while, just been lazy. Do you know where I can find a webhost for free that I can point my domain to?

* - Armada - 08-28-2015 04:51 AM

(08-28-2015 04:38 AM)sudoaptgetusr Wrote: ►I've been wanting to do something silmilar for a while, just been lazy. Do you know where I can find a webhost for free that I can point my domain to?

As I noted, pop.co is a fantastic resource for this, I generally just throw my file up to dropbox (They dont distribute BTW, I've tested) and link to that. People generally dont check the links or if they go off site.

pop.co also ofers free ad free hosting for very simple single or 2-3 page sites (might just be single, I dun remember to be honest)

And honestly. I whip this together from start to finish within 30-45 mins. MAX.
So even an inexperienced person who might muddle through the steps might take a maximum of 1.5 hours. Super minimal effort for the pay off bro.  Black Hat

- And to the comment about not SELLING m method. - I noted this is an excerpt from a soon to be for sale commercial BOOK. But we gotta give some stuff out for free. (I find it only fair, as it was a promise I made to my Mentor, so many years ago) Black Hat

My only hope is others take on this same approach, and dont get overly greedy after they have experience themselves.

* - Paul Wilson - 08-28-2015 05:03 AM

(08-28-2015 04:51 AM)ȺʁɱªÐą Wrote: ►As I noted, pop.co is a fantastic resource for this, I generally just throw my file up to dropbox (They dont distribute BTW, I've tested) and link to that. People generally dont check the links or if they go off site.

pop.co also ofers free ad free hosting for very simple single or 2-3 page sites (might just be single, I dun remember to be honest)

And honestly. I whip this together from start to finish within 30-45 mins. MAX.
So even an inexperienced person who might muddle through the steps might take a maximum of 1.5 hours. Super minimal effort for the pay off bro.  Black Hat

- And to the comment about not SELLING m method. - I noted this is an excerpt from a soon to be for sale commercial BOOK. But we gotta give some stuff out for free. (I find it only fair, as it was a promise I made to my Mentor, so many years ago) Black Hat

My only hope is others take on this same approach, and dont get overly greedy after they have experience themselves.

Do you have to write your own files or is there an editor? Because a website like weebly has an editor so you can make your site look professional very quickly without any knowledge

* - matisshakeris - 08-28-2015 05:36 AM

Couldnt you just use 000webhost and host the file one the website itself? I suggest 000webhost because that's what im using myself too.
Greath method. Anyways.
Avoid hosting sites like rghost or sendspace because browser will likely block it as malware since it's "unstrusted source" i can avoid that uploading to my own site file.