Guitar Solo - Multimedia - Malware Reverse Engineering - Craking - Make Money Online

Tui xin giới thiệu: "Badblood" la mot cong cu giup ban lam cho victim bi lay nhiem con trojan (cua ban) de dang hon qua con duong email.

Badblood la thuat ngu moi duoc phat hien boi Marklord, su phat hien nay giup chung ta co the chay file dinh kem (attached files) trong mail, ma` dac biet la nguoi su dung khong the biet duoc.

Badblood su dung script hidden, no khong chi anh huong den Outlook Express ma con lam anh huong toi tat ca nhung nguoi su dung IE5.0 voi Outlook Express di ke`m (install khi cai Windows), su dung Windows95 hay Windows98.

Ngay ca khi nguoi dung su dung cac trinh Mail client nhu Netscape Messager,(Eudora thi toi chua test) v.v.., se deu bi lay nhiem ca neu nhu Open file *.eml ma` toi sap huong dan ban cach tao ra chung. Ban con co the lam lay nhiem ca nguoi dung dich vu Hotmail, hoac HTML-mail, nhung chu y la ho *bat buoc* phai mo file *.eml thi moi bi lay nhiem (:<)

Buoc1:(Rat quan trong)
Chung ta phai vao Your ads...] body=[đặt banner và quảng cáo của bạn vói từ khóa này miễn phí YIM: binhaus] fade=[on] fadespeed=[0.3]" onmouseover="window.status='/modules.php?name=Feedback'; return true;" onmouseout="window.status=' ';">Internet Explorer -> Option -> Security Tab, nhan Custom Level, va tat (disable) tat ca chuc nang cho phep chay Script(Neu khong chinh may ban se bi nhiem)

Buoc2:
Chuan bi 1 con virus, trojan,backdoor, etc., 1 chuong trinh dung de Edit nhu EditPlus, TextPad.

Buoc3:
+Chay Outlook Express, nhan New Message ->Format->Background->Picures (or Sound) (vi du file ding.wav chang han)
+ Attach them 1 file trojan, hoac virus = nu't Attach (dat ten la file.exe chang han)
+ Save ca'i email na`y ra mot thu muc nao do' tren o cung.

Buoc4:
Dung EditPlus hoac TextPad, hoac 1 chuong trinh nao do dung de edit text, mo file *.eml nay ra. Trong phan source code cua file nay se co dong nhu sau:
Ban hay Cat dong sau:

Content-Disposition: attachment;
filename="file.exe"
- Va dan vao phan dinh dang file ding.wav, no se trong nhu sau:
Content-Type: audio/wav;
name="Ding.wav"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; {Chu thich: 2 dong duoi nay la dan vao thi no moi hien ra nhu vay}
filename="file.exe"
- Sau do vao phan dinh dang attachement ding.wav ta cat dong
Content-ID sau:
Content-ID: <002801bf41c9$95325940$0100007f@computername>
- dan no vao phan dinh dang cua attachement file.exe. No se trong giong nhu the nay:

Guitar Solo - Multimedia - Malware Reverse Engineering - Craking - Make Money Online

Trao đổi với tôi

7/6/10

[Virus] Cách dính trojan vào mail và web