# ransomware (1)
how to make ransomware

var unreadAlerts = '1';
Welcome back, purely_cabbage. You last visited: Today, 06:36 AM Log Out
You have one unread private message from dkota titled Welcome to the Forum!
New Reply

Threaded Mode ransomware

nomaidenboy
Newbie
Posts:
5
Threads:
1
Joined:
Jun 2023
Reputation:
0
Credits: 7.35€ [Donate]
#1
06-18-2023, 10:49 PM
how to make ransomware
PM Rate
Report
phosphate
Elite
Posts:
4
Threads:
0
Joined:
Jun 2023
Reputation:
1
Credits: 6.65€ [Donate]
#2
06-18-2023, 11:06 PM
conti and lockbit have had their sources leaked. could look at them. other ransomware source out there too. plenty of technical analysis on existing ransomwares and their functionality, from day to day operations to the encryption process. just pick your poison and search around.
PM Rate
Reply Quote // Report
heyTakka
Senior Member
Posts:
40
Threads:
16
Joined:
Feb 2023
Reputation:
55
Credits: 0.35€ [Donate]
View All
#3
06-19-2023, 10:47 AM
many ways and techs. heres basic assuming you are targeting corporate systems (this will not actually work get creative)
1) Get in.(phishing, web vulns, etc)
these next couple are in no particular order
#)Spread to other computers
#)Spread to backups
#)Exfil data(maybe ??)
3) encrypt systems with random generated key. There are two ways to keep this key secret AND random
either use pub key encryption(if you write your own make sure side channel attack is not viable) or generate the key and send to c2(encrypt this traffic)
4) If they dont pay release/sell their data if they do pay provide decryptor
5)PROFIT
tips:
Await for certain date so the malware gets backed up
Only encrypt files that have a certain extension(pdf, txr, etc, etc)
Get creative, change their background, make a gui, stop processes, etc etc.
UwU
PM Rate
Reply Quote // Report
nullcat
Junior Member
Posts:
15
Threads:
2
Joined:
May 2023
Reputation:
0
Credits: 6.36€ [Donate]
#4
06-19-2023, 10:26 PM
Learn how encryption algorithms work. Learn C++ (you can use other languages like C# but C++ is the standard for most ransomware). If you are infecting individual computers then don't expect to receive a large amount of money, most people don't have anything too important on their computer to pay money for and most of what they care about (like games) are on the cloud. You would be better off using their hardware resources with a stealthy Monero CPU miner. Targeting organizations is a better way of making money with ransomware (but you have to really know what you are doing).
PM Rate
Reply Quote // Report
nomaidenboy
Newbie
Posts:
5
Threads:
1
Joined:
Jun 2023
Reputation:
0
Credits: 7.35€ [Donate]
#5
Yesterday, 12:53 AM (This post was last modified: Yesterday, 12:55 AM by nomaidenboy.)

> nullcat Wrote: Learn how encryption algorithms work. Learn C++ (you can use other languages like C# but C++ is the standard for most ransomware). If you are infecting individual computers then don't expect to receive a large amount of money, most people don't have anything too important on their computer to pay money for and most of what they care about (like games) are on the cloud. You would be better off using their hardware resources with a stealthy Monero CPU miner. Targeting organizations is a better way of making money with ransomware (but you have to really know what you are doing).

I have access to the backdoor I created and the database of a large company
can ransomware lock php or postgresql/mysql databases?
I want to lock their database and application files.
because holding pdf document data and other files is no longer effective

> heyTakka Wrote: many ways and techs. heres basic assuming you are targeting corporate systems (this will not actually work get creative)
> 1) Get in.(phishing, web vulns, etc)
> these next couple are in no particular order
> #)Spread to other computers
> #)Spread to backups
> #)Exfil data(maybe ??)
> 3) encrypt systems with random generated key. There are two ways to keep this key secret AND random
> either use pub key encryption(if you write your own make sure side channel attack is not viable) or generate the key and send to c2(encrypt this traffic)
> 4) If they dont pay release/sell their data if they do pay provide decryptor
> 5)PROFIT
> tips:
> Await for certain date so the malware gets backed up
> Only encrypt files that have a certain extension(pdf, txr, etc, etc)
> Get creative, change their background, make a gui, stop processes, etc etc.

I have access to the backdoor I created and the database of a large company
can ransomware lock php or postgresql/mysql databases?
I want to lock their database and application files.
because holding pdf document data and other files is no longer effective
PM Rate
Reply Quote // Report
heyTakka
Senior Member
Posts:
40
Threads:
16
Joined:
Feb 2023
Reputation:
55
Credits: 0.35€ [Donate]
View All
#6
Yesterday, 09:21 AM

> nomaidenboy Wrote:

> > nullcat Wrote: Learn how encryption algorithms work. Learn C++ (you can use other languages like C# but C++ is the standard for most ransomware). If you are infecting individual computers then don't expect to receive a large amount of money, most people don't have anything too important on their computer to pay money for and most of what they care about (like games) are on the cloud. You would be better off using their hardware resources with a stealthy Monero CPU miner. Targeting organizations is a better way of making money with ransomware (but you have to really know what you are doing).

> I have access to the backdoor I created and the database of a large company
> can ransomware lock php or postgresql/mysql databases?
> I want to lock their database and application files.
> because holding pdf document data and other files is no longer effective

> > heyTakka Wrote: many ways and techs. heres basic assuming you are targeting corporate systems (this will not actually work get creative)
> > 1) Get in.(phishing, web vulns, etc)
> > these next couple are in no particular order
> > #)Spread to other computers
> > #)Spread to backups
> > #)Exfil data(maybe ??)
> > 3) encrypt systems with random generated key. There are two ways to keep this key secret AND random
> > either use pub key encryption(if you write your own make sure side channel attack is not viable) or generate the key and send to c2(encrypt this traffic)
> > 4) If they dont pay release/sell their data if they do pay provide decryptor
> > 5)PROFIT
> > tips:
> > Await for certain date so the malware gets backed up
> > Only encrypt files that have a certain extension(pdf, txr, etc, etc)
> > Get creative, change their background, make a gui, stop processes, etc etc.

> I have access to the backdoor I created and the database of a large company
> can ransomware lock php or postgresql/mysql databases?
> I want to lock their database and application files.
> because holding pdf document data and other files is no longer effective

yes most files with exceptions can be encrypted.
UwU
PM Rate
Reply Quote // Report
nomaidenboy
Newbie
Posts:
5
Threads:
1
Joined:
Jun 2023
Reputation:
0
Credits: 7.35€ [Donate]
#7
11 hours ago

> heyTakka Wrote:

> > nomaidenboy Wrote:

> > > nullcat Wrote: Learn how encryption algorithms work. Learn C++ (you can use other languages like C# but C++ is the standard for most ransomware). If you are infecting individual computers then don't expect to receive a large amount of money, most people don't have anything too important on their computer to pay money for and most of what they care about (like games) are on the cloud. You would be better off using their hardware resources with a stealthy Monero CPU miner. Targeting organizations is a better way of making money with ransomware (but you have to really know what you are doing).

> > I have access to the backdoor I created and the database of a large company
> > can ransomware lock php or postgresql/mysql databases?
> > I want to lock their database and application files.
> > because holding pdf document data and other files is no longer effective

> > > heyTakka Wrote: many ways and techs. heres basic assuming you are targeting corporate systems (this will not actually work get creative)
> > > 1) Get in.(phishing, web vulns, etc)
> > > these next couple are in no particular order
> > > #)Spread to other computers
> > > #)Spread to backups
> > > #)Exfil data(maybe ??)
> > > 3) encrypt systems with random generated key. There are two ways to keep this key secret AND random
> > > either use pub key encryption(if you write your own make sure side channel attack is not viable) or generate the key and send to c2(encrypt this traffic)
> > > 4) If they dont pay release/sell their data if they do pay provide decryptor
> > > 5)PROFIT
> > > tips:
> > > Await for certain date so the malware gets backed up
> > > Only encrypt files that have a certain extension(pdf, txr, etc, etc)
> > > Get creative, change their background, make a gui, stop processes, etc etc.

> > I have access to the backdoor I created and the database of a large company
> > can ransomware lock php or postgresql/mysql databases?
> > I want to lock their database and application files.
> > because holding pdf document data and other files is no longer effective

> yes most files with exceptions can be encrypted.

can you help me
or maybe help sell the backdoor and database access I got
PM Rate
Reply Quote // Report
nullcat
Junior Member
Posts:
15
Threads:
2
Joined:
May 2023
Reputation:
0
Credits: 6.36€ [Donate]
#8
3 hours ago

> nomaidenboy Wrote:

> > nullcat Wrote: Learn how encryption algorithms work. Learn C++ (you can use other languages like C# but C++ is the standard for most ransomware). If you are infecting individual computers then don't expect to receive a large amount of money, most people don't have anything too important on their computer to pay money for and most of what they care about (like games) are on the cloud. You would be better off using their hardware resources with a stealthy Monero CPU miner. Targeting organizations is a better way of making money with ransomware (but you have to really know what you are doing).

> I have access to the backdoor I created and the database of a large company
> can ransomware lock php or postgresql/mysql databases?
> I want to lock their database and application files.
> because holding pdf document data and other files is no longer effective

> > heyTakka Wrote: many ways and techs. heres basic assuming you are targeting corporate systems (this will not actually work get creative)
> > 1) Get in.(phishing, web vulns, etc)
> > these next couple are in no particular order
> > #)Spread to other computers
> > #)Spread to backups
> > #)Exfil data(maybe ??)
> > 3) encrypt systems with random generated key. There are two ways to keep this key secret AND random
> > either use pub key encryption(if you write your own make sure side channel attack is not viable) or generate the key and send to c2(encrypt this traffic)
> > 4) If they dont pay release/sell their data if they do pay provide decryptor
> > 5)PROFIT
> > tips:
> > Await for certain date so the malware gets backed up
> > Only encrypt files that have a certain extension(pdf, txr, etc, etc)
> > Get creative, change their background, make a gui, stop processes, etc etc.

> I have access to the backdoor I created and the database of a large company
> can ransomware lock php or postgresql/mysql databases?
> I want to lock their database and application files.
> because holding pdf document data and other files is no longer effective

Database engines like MySQL store the data in files (big surprise) and these files can be encrypted with ransomware. The issue is If the company has any legitimacy then they will have kept backups to this data so ransomware will be ineffective. If this data is sensitive then you could download it and blackmail them threatening to leak the data. Ensure that you take the necessary steps to not have this attack traced back to you for obvious reasons
PM Rate
Reply Quote // Report

« Next Oldest | Next Newest »

New Reply

Quick Reply
Message Type your reply to this message here. Signature Disable Smilies | You have selected one or more posts to quote. Quote these posts now or deselect them.

Possibly Related Threads…
Thread | Author | Replies | Views | Last Post
| Ransomware Actor Leaves Tools on VPS | DataBroker | 3 | 69 | 06-19-2023, 10:39 PM Last Post: shroom_vagabond
| Conti Ransomware and Roadmap Guide | Omien | 2 | 256 | 05-01-2023, 02:29 PM Last Post: bitflips

- Subscribe to this thread

Users browsing this thread: purely_cabbage
var thread_deleted = "0"; if(thread_deleted == "1") { $("#quick_reply_form, .new_reply_button, .thread_tools, .inline_rating").hide(); $("#moderator_options_selector option.option_mirage").attr("disabled","disabled"); }