Leaderboard
Popular Content
Showing content with the highest reputation on 05/18/2024 in all areas
-
2 points
Time Left: 2 months and 8 days
- FOR SALE
- NEW
DESJARDINS SCAMPAGE .ZIP FILES UPLOAD AND UNZIP EDIT NECESSARY FILES WITH SOFTWARE OR ON SERVER UNDETECTABLE TO MANY SERVER INSTAT DELIVERY PLEASE CONTACT ME IF MORE HELP IS REQUIRED FOR ANY PRODUCT. DO NOT DISPUTE AN ORDER THE ADMIN IS VERY BUSY AND THEY WILL TAKE FOREVER TO SOLVE YOUR EMOTION ISSUES$200.00
-
2 points
Time Left: 9 months and 6 days
- FOR SALE
- NEW
My team and I will deliver any product from Amazon or Ebay for 40%. The service of receiving parcels by drop is free of charge. You receive the package from us, not from the store. Only you know about the origin of this product, so it is safe. Min. order 250$ ( My share)$250.00
-
2 points
Time Left: 9 months and 6 days
- FOR SALE
- NEW
Hello everybody! Welcome to my WOLOW MONEY TRANSFER service. Bank transfers is one of the destinations. The minimum transfer amount is 2000$ 2000$ - 800$ (my share) 3000$ -1100$ (my share) 4000$ - 1400$ (my share) 5000$ - 1600$ (my share) https://t.me/wolowmoneytransfer$800.00
-
1 point
Time Left: 6 months and 29 days
- FOR SALE
- NEW
Works fine @ full line-up of NCR SelfServ \ Diebold CS \ NCR Personas \ Nixdorf Procash models. ATM Trojan. Withdrawing all cassettes one-by-one. Doesnt needs any physical access inside of ATM. It works through one 64kb EMV card. You are inserting the card for the first time - cancelling operation when PIN is asked - ATM will eject card back. Then insert the card second time - enter custom 8-digit PIN (every build have its personal PIN which is being provided with a build) - menu will appear (which allows you to withdraw all banknotes from casettes). Updates are provided on the paid basis. Price varies depending on the build. Manuals and how-to are included with software. Works fine @ full line-up of NCR SelfServ \ Diebold CS \ NCR Personas \ Nixdorf Procash models.$2,500.00
-
1 point
Time Left: 2 months and 7 days
- FOR SALE
- NEW
NFC ATM Jackpotting Malware. Works only at NCR SelfServ NCR ProCash modes (WORLDWIDE). Withdraws all cassettes one-by-one. DOESN'T REQUIRE USB ACCESS OR ANY PHYSICAL INSIDE ACCESS. Injects through NFC card. You will need a very specific software to use it. I'll help with links where you can buy it. Overall spendings will be around 50-100 USD. I will stop selling at any time. As soon as I realize that too many people use it.. Manual and safety guide will be included with software. Any technical details won't be shared until funds are in escrow.$2,500.00
-
1 point
-
1 point
Time Left: 18 days and 10 hours
- FOR SALE
- NEW
Dissecting DEFENSOR: a stealthy Android banking malware Android malware apps are nothing new, but this one is of particular interest in how it implements no such functionality that can be readily detected by security products. The apps named DEFENSOR ID and Defensor Digital rely mainly on Android's Accessibility Service to conduct malicious activities, and go undetected. In fact, a blog post released May 22nd 2020 by malware researcher Lukas Stefanko of ESET states, "the banking trojan was available on Google Play at the time of the analysis. The app is fitted with standard information-stealing capabilities; however, this banker is exceptionally insidious in that after installation it requires a single action from the victim – enable Android’s Accessibility Service – to fully unleash the app’s malicious functionality." The blog post also demonstrates at the time of its inception, no antivirus engine detected this malware sample. Even today, only 5-6 detection engines are flagging these two apps, according to VirusTotal. This raises concern for the next iteration of malware that may be nothing but a slight modification of these apps. Android Accessibility Service To make smartphones more accessible to users with special needs, the Accessibility Service allows for the device to extend permissions to an app to read screen content (e.g. for providing text to speech synthesis capability). You can imagine how useful would such a functionality be to a malicious app. Existing detection models can reliably predict when certain combinations of permissions requested by an app may pose problems. But because the Defensor apps mainly relied on obtaining Accessibility Service permissions from the user, along with some other minimalistic ones, no red flags were raised anywhere. The permissions requested by the app include the following, of which the critical ones are highlighted: android.permission.INTERNET android.permission.SYSTEM_ALERT_WINDOW android.permission.BIND_ACCESSIBILITY_SERVICE com.secure.protect.world.permission.C2D_MESSAGE android.permission.ACCESS_NETWORK_STATE android.permission.FOREGROUND_SERVICE android.permission.REQUEST_DELETE_PACKAGES android.permission.SYSTEM_OVERLAY_WINDOW android.permission.WAKE_LOCK android.permission.WRITE_SETTINGS com.google.android.c2dm.permission.RECEIVE In practice, this means the app can capture credentials entered by the user on mobile banking apps, read or generate SMS messages, read emails, read Two-Factor Authentication (2FA) codes generated by authenticator apps — thereby bypassing 2FA, steal cryptocurrency private keys, and so on, and upload all of this vital information to an attacker-controlled server! The app also requests the WAKE_LOCK permission, letting it override the default screen timeout setting, and keeping the device turned on persistently. This would give malware an extended opportunity to launch other apps and to continuously capturing sensitive information. The screenshots provided by ESET demonstrate this behaviour: Indicators of Compromise (IOCs) To make things easy for the security community, malware researchers at ESET have thankfully provided two useful IOCs identifying the malicious apps that have now been yanked from the Google Play store. Package Name SHA-1 Hash SHA-256 Hash ESET detection name com.secure.protect.world F17AEBC741957AA21CFE7C7D7BAEC0900E863F61 BBFB6DEDC01492CA3AC0C4F77343A22162518B306660E9CE958F2A6369FFAF13 Android/Spy.BanBra.A com.brazil.android.free EA069A5C96DC1DB0715923EB68192FD325F3D3CE B5A64791728AA641838D2A478375F5D46F91C91B8DF0CDE34B21DDA2D4D7D8A1 Android/Spy.BanBra.A New information and my analysis ESET researchers have done a brilliant job of presenting their comprehensive analysis of these apps and their documented behaviour. Further to their report however, I'd like to add a bit of my own findings. Command & Control (C&C) domains The attacker controlled C&C domains are still up — well at least one of them, and that's problematic. Domain IP address Task empresasenegocios.online 132.148.42.16 Command & Control (C&C) atendimentoempresarial.digital 184.168.221.46 Command & Control (C&C) The URLs specifically used by the app to establish communication between the attacker-controlled server include: https://empresasenegocios.online/remoteControl/ https://empresasenegocios.online/remoteControl/api/main/index/ http://atendimentoempresarial.digital/remoteControl/api/main/index http://atendimentoempresarial.digital/remoteControl/ Interestingly, VirusTotal reports most antivirus engines are still not flagging these URLs, except for FortiNet which flags just one of the empresasenegocios.online URLs as phishing: Nevermind the fact, the empresasenegocios.online domain still has a fancy admin panel for the attackers to log into and glance over the juicy details of their victims 🍿: Here's also a preview of the API: And the domain continues to be hosted on GoDaddy's shared hosting, with its beautiful cPanel and WebMail interfaces accessible: empresasenegocios.online/cpanel: empresasenegocios.online/webmail: At least, atendimentoempresarial.digital domain has its GoDaddy parking page showing up for now. While that's no guarantee that the domain's malicious ownership or activities have ceased, so far there are no strong signs indicating ongoing activity either. The WHOIS records of these domains didn't reveal anything particularly interesting other than Sãu Paulo, Brazil addresses and phone numbers, which could very likely be fakes, along with two email addresses belonging to the anonymous ProtonMail service: [email protected] and [email protected]. The Takeaways Enforcing BYOD policies Because prominent antivirus engines are not detecting apps like these — even now, advice to "scan your mobile device" is futile. SOC analysts and Security Ops professionals are strongly advised to enforce a corporate mobile device policy which restricts employee access to Google Play app store on their work devices. Apps like these pose significant threats to an organization's secrets especially when an organization has a relaxed Bring Your Own Device (BYOD) policy, allowing for corporate email accounts to be accessible on an employee's personal mobile device (e.g. Gmail's Android app managing both personal and work accounts of a user would not be immune to attacks like these, and could easily infiltrate corporate trade secrets to malicious actors). Network monitoring and blocks Additionally, extensive network monitoring in your SIEM/EDR products should be setup for these servers, with network blocks implemented, given at least one of these domains is still active. That way, any device on your corporate network would be prevented from inadvertently making calls to these domains. Note: The IP addresses appear to belong to GoDaddy's shared hosting, therefore blocking these could potentially block legitimate websites. It is best to block the malicious domains for the time being. DEFENSOR ID and Defensor Digital were just two of the apps which have been identified and removed from the Play store, but given their stealthy behaviour, we do not know as of yet how many other apps might be using these servers or leveraging the Accessibility Service weakness.$299.00
-
1 point
-
1 point
Time Left: 2 months and 8 days
- FOR SALE
- NEW
CIBC SCAMPAGE .ZIP FILES UPLOAD AND UNZIP EDIT NECESSARY FILES WITH SOFTWARE OR ON SERVER UNDETECTABLE TO MANY SERVER INSTAT DELIVERY PLEASE CONTACT ME IF MORE HELP IS REQUIRED FOR ANY PRODUCT. DO NOT DISPUTE AN ORDER THE ADMIN IS VERY BUSY AND THEY WILL TAKE FOREVER TO SOLVE YOUR EMOTION ISSUES$200.00
-
1 point
Time Left: 2 months and 8 days
- FOR SALE
- NEW
HSBC BANK SCAMPAGE .ZIP FILES UPLOAD AND UNZIP EDIT NECESSARY FILES WITH SOFTWARE OR ON SERVER UNDETECTABLE TO MANY SERVER INSTAT DELIVERY PLEASE CONTACT ME IF MORE HELP IS REQUIRED FOR ANY PRODUCT. DO NOT DISPUTE AN ORDER THE ADMIN IS VERY BUSY AND THEY WILL TAKE FOREVER TO SOLVE YOUR EMOTION ISSUES$200.00
-
1 point
Time Left: 2 months and 8 days
- FOR SALE
- NEW
LLOYDS BANK SCAMPAGE .ZIP FILES UPLOAD AND UNZIP EDIT NECESSARY FILES WITH SOFTWARE OR ON SERVER UNDETECTABLE TO MANY SERVER INSTAT DELIVERY PLEASE CONTACT ME IF MORE HELP IS REQUIRED FOR ANY PRODUCT. DO NOT DISPUTE AN ORDER THE ADMIN IS VERY BUSY AND THEY WILL TAKE FOREVER TO SOLVE YOUR EMOTION ISSUES$200.00
-
1 point
Time Left: 2 months and 8 days
- FOR SALE
- NEW
WELLS FARGO SCAMPAGE .ZIP FILES UPLOAD AND UNZIP EDIT NECESSARY FILES WITH SOFTWARE OR ON SERVER UNDETECTABLE TO MANY SERVER INSTAT DELIVERY PLEASE CONTACT ME IF MORE HELP IS REQUIRED FOR ANY PRODUCT. DO NOT DISPUTE AN ORDER THE ADMIN IS VERY BUSY AND THEY WILL TAKE FOREVER TO SOLVE YOUR EMOTION ISSUES$200.00
-
1 point
Time Left: 2 months and 7 days
- FOR SALE
- NEW
Description IMPORTANT! -100% Guarantee! IMPORTANT! -Instant Delivery! IMPORTANT! -Request your bonus after positive feedback! Item description: About me: I am a carder myself with more than 10 years of experience! With the Cashout Methods I am using myself and now offering to you guys you can easily make up to 4000 - 6000 $/£ per DAY Easily! All methods are based on my own experiences. Again: I am using all methods by myself and they work 100 You can make thousands of dollars/Pounds every single day when mastering these methods Some methods are so simple you can't do anything wrong!!! I promise! You will get: - 5 proven step-by-step CASHOUT METHODS that are working 100% (All up to date - 2021! n easy to follow even for BEGINNER) - list of legit darkweb CVV VENDORS I am using myself (Never get scammed again!) - list of CARDABLE SITES (Never kill card due to high security level of website!) Once ordered you will get a download link with PDF Guide which contains all information mentioned above Refund policy Please Give Me Enough Time To Reply To You Before You Leave A Review (If You Have A Problem) Kind Regards$229.00
-
1 point
Time Left: 2 months and 7 days
- FOR SALE
- NEW
This contains 13 really great methods to make a great living with carding. Besides different websites and techniques this are the highlights in the guides: - Top notch carding video's and pdfs - Anonimity, changing socks5 and top socks5 providers - The best way to connect RDP - Cashing out CC in front of YOU, making $250 in 15 minutes - CARDING SAMSUNG phones - Cashing out PAYPAL accounts$499.00
-
1 point
Time Left: 9 months and 11 hours
- FOR SALE
- NEW
Hello everybody! Welcome to my WOLOW MONEY TRANSFER service. Western union is one of the destinations. The minimum transfer amount is 1000$ 1000$ - 400$ (my share) 2000$ -700$ (my share) 3000$ - 900$ (my share) 4000$ - 1000$ (my share) 5000$ -1200$ (my share) https://t.me/wolowmoneytransfer$400.00
-
1 point
-
1 point
Time Left: 6 months and 29 days
- FOR SALE
- NEW
To infect the device, it is enough for the user to click on the link or open the image. Up to $ 1000 per year with 1 connected device. The number of connected devices depends on you, there may be 10 or even 10,000. Antivirus programs do not react to infection in any way. Additional questions in telegram or PM$999.00
-
1 point
Time Left: 6 months and 29 days
- FOR SALE
- NEW
To infect the device, it is enough for the user to click on the link or open the image. Up to $ 1000 per year with 1 connected device. The number of connected devices depends on you, there may be 10 or even 10,000. Antivirus programs do not react to infection in any way. Additional questions in telegram or PM$999.00
-
1 point
Time Left: 6 months and 28 days
- FOR SALE
- NEW
NEW VERSION AVAILABLE – NEW INTERFACE, UPGADED ANTENNA, MODEL V22.3.4 LTE2017-2018 year model. ATM Skimming without any physical contact. This Skimmer will work without a physical connection to ATM/POS Machine. This product is our best-seller, and is most popular credit card skimming device Worldwide. This is GSM data receiver – skimmer. It receives credit card data from ATM`s and POS terminals. Small size 5×4 Centimeters, antenna length 17 centimeters. With one charging it can work up to 8 hours and the manufactured memory can capture about 100000 credit card data, with antenna it can take data in radius of 50 meters. Device can work from (-25 to +45 degrees). We use 3.7V 2500mAh batteries. With one charging the device can work up to 8-10 hours. It have built in a built in memory 32 gb, it can store up to 100000 credit card details with pin codes. Briefly – GSM data receiver is a GSM module receiver which with the help of special software clones and receives all credit card information from ATM`s and POS terminals. The received information is stored by your phone or laptop. To collect this information, you just need to connect the device to your computer or mobile device and the device will send the data to your computer, with the help of the software V22.3.4. GSM receiver have also implemented a new feature, option to add power bank to incase skimming lifetime. GSM data receiver is small & you can easily hide it in your bag, clothes, pocket, or in your car – near the POS/ATM terminal. Device has two led lights – Red and Green Red – Device needs to charge. Flashing red – Device can work for 30 – 40 min more, afterwards it needs to be recharged or added power bank or usb charger. Green+Red – Device is working. Flashing green – Device is connecting. Price for GSM Data Receiver $1000 USD with shipping included. Price for GSM Data Receiver + MSR encoder and 100 pcs cards $1215USD with shipping included.$1,000.00
-
1 point:pepelove: No +REP = Report = BaN :jocker: [hide] [align=center] https://pastr.io/view/xDw5iv [/align] [/hide] gib me +rep :pepegun: and like :pepegun: and fap away :kek:
-
1 point
-
1 point
-
1 pointSTAFF VOUCH! Are you sick and tired of seeing shit like "PRIVATE MONEY MAKING METHOD MAKE UPTO 5000$ A DAY 1 ON 1 MENTORING" kind of lies? Are you bored of fake promises, lies, CPA and adfly methods? Did you ever fall into the lies of some seller, just because he has an HQ thread with fancy lights and words? (fuck fancy thread, BB codes ftw) ____________________________________________________________________________________________________________________________ Well, let me start by answering a few possible questions; Q: Will I need to make a website? A: No Q: How can I contact you? A: You can contact me via PM or Discord at: Code76#5049 BEWARE OF SCAMMERS Q: How long will it take me to make money after I buy this? A: It varies depending on the effort you put in, You do need a few things to start off with tho! Q: Will I need a bitcoin or paypal account? A: YES! Q: I live in "xxnx" and am "xx" years old, will this method work for me? A: This method works worldwide as long as you have internet connection, there's no age limit as it isn't gambling. Q: Is this autopilot? A: No you fat ass, easy money doesn't come easy Q: Is an investment required in order to start using these methods and earning money? A: Yes, the bigger the investment the better! Q: If you're making so much money out of this, why are you selling it? A: There are too many answers to this question: Most people sell their "Money Making Methods" just because they can't make a penny out of it, I am selling it because: I can use sales as a second source of income since this method can never get saturated or "Patched" I could use someone to discuss the method with / How to improve it; but at the same time I am not willing to give it away for free on this forum due to its great value and how effective it is, I just don't want plebs I don't know getthis method. The price is high because you can make x2 the amount you paid in just 2 weeks, and work only a few hours for 2 days a week. That's 4 days of work and you'll get the money in 4 weeks! Just like everything there's a chance you lose, However this isn't gambling. If you lose you ain't gonna lose all of your money but just a percentage of it, say a 1% Now let me share my proofs of earnings; TXID OF THIS TRANSACTION: https://www.blockchain.com/btc/tx/9c8f057dfdb39192cfd9b17a327825f580e6d119e78ef5ec55b52d1a52e501be TXID of this transaction: https://www.blockchain.com/btc/tx/5b0eb33a8d2cecad689036dfc6b1f1dead0fda512f869b8077cc23a43b0d1dd0 TXID of this transaction: https://www.blockchain.com/btc/tx/9908e4890d3aab4e0315bfb2d8888badbdb7a3d5d8b67c05cff80024687e2d35 DM me on my discord for other many proofs! I just showed my recent 2 weeks old transactions, I can show more ONLY if you are interested! __________________________________________________________________________________________________ If you are still skeptical about these proofs, DM me on my discord Lemonade#5049 and I'll SCREENSHARE my earnings and refresh the page too many times for you Q: That being said, how much do I charge for the method? 400$ But it's for good reasons, I'll also offer 1 on 1 support and be with you to the very end. Add me on discord: Code76#5049 ^ I am giving out vouch copies to ONE lucky ㄒ尺ㄩ丂ㄒ乇ᗪ https://cracked.to/images/items/item17.png[/img] USER! Users known for being vouch hunters and are blacklisted from obtaining a vouch copy from me: [align=justify] NopeAzu Yeah that's pretty much everyone. Whoever you are, If you take a vouch copy, please write an honest and straight review. I am confident in my methods and I don't want any hypocrites [/align] FAIR DISCLAIMER: This is a grayhat method! EDIT 2: WE NOW HAVE AN OFFICIAL DISCORD! JOIN AND ASK AS MANY QUESTIONS AS YOU'D LIKE! https://discord.gg/qD7W5p BUT PLEASE BE AWARE WE ARE SELLING LIMITED COPIES https://discord.gg/qD7W5p BUT PLEASE BE AWARE WE ARE SELLING LIMITED COPIES
-
1 point
-
1 point:fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :??: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta: :fiesta:
-
1 point
-
1 point6500x Spotify Accounts | High Quality | 99.9% Working
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point
-
1 point