How hackers can switch on your webcam and control your computer

Discussion in 'News Aggregator' started by Mr. Penguin, 2 Apr 2013.

  1. Mr. Penguin

    Mr. Penguin Administrator
    Staff Member Admin Moderator VIP

    Joined:
    18 May 2012
    Messages:
    3,087
    Likes Received:
    1,186
    Trophy Points:
    351
    The 14-year-old couldn't believe his eyes. The virtual currency he'd worked so hard to amass in the online role-playing game Runescape had vanished. He'd lost the equivalent of $700 in the blink of an eye, after investing his pocket money into the game's economy for months. All that remained was an instant message dialogue box: "Haha, you got RATted!"

    Sitting in his bedroom in Wauchope, on the mid-north coast of NSW, the teenager wrote back: "What does that mean?" He didn't know at the time that his machine had been compromised by a Remote Administration Tool (RAT), an aggressive form of malware that allows hackers to access a victim's entire computer. It was too late. The thief had disappeared. "He ran away with my money, like a girl," laments Alex (not his real name).

    'Alex' the NSW hacker​

    Weeks later, his desolation and rage had been replaced by joy. After researching RATs and spending an entire day spreading an innocuous link using Runescape's in-game chat function, in the hope that someone would visit the page and run the Javascript application embedded within, Alex had his mark.

    [​IMG]
    An image uploaded to a hacking forum showing a woman picking her nose as seen through her webcam.​
    Within a few clicks, the teenager had access to a stranger's entire computer, without their knowledge. "I was the happiest kid in the whole entire world," he says. "I could see their desktop, what they typed, the history of what they'd typed, stored passwords, files – everything."

    His victim didn't have a webcam, so Alex wasn't sure of their gender or their appearance, although he assumes they were male. But he knew that they played Runescape, so he got straight to work on what mattered: looting their gold, just as he'd recently experienced himself.

    After emptying the stranger's account, the teenager watched, intrigued, as his mark realised that he'd been hacked, and began trying to close the connection. Fifteen minutes later, Alex's first "slave" – hacker shorthand for a compromised user – had disconnected himself.

    [​IMG]

    An image uploaded to a hacking forum showing a woman sleeping as seen through her webcam.
    The RATted had become the RATter. "I felt unstoppable," says Alex, now 17 and studying Year 11. "I was really insecure about myself at the time. I felt like the most powerful person on Runescape."

    The senior security manager at antivirus software company Trend Micro has another name for RAT: Remote Access Trojan. "It's a piece of software loaded onto somebody's computer that allows it to be controlled or accessed from a third-party location," says Adam Biviano in Sydney.

    [​IMG]

    "They often arrive on a computer masquerading as something else," he says. "Just like the mythological story, you open your gates up and you allow it inside your protected walls. All of a sudden, you think you're getting one thing, but in reality you're getting what they call a 'RAT'. You're giving access to your computer to ... who knows who."

    A 14-year-old boy motivated by revenge is probably one of the last people you'd want to have unmitigated access to your computer. Especially if you're female, given that one of the most commonly exploited features of RAT software is the ability to spy on a user's webcam. Many modern laptops will display a green light when the webcam is in use; however, RAT developers have long since worked out how to disable that tell-tale sign on some computers.

    The cumulative effect is a gross breach of privacy, often without the user's knowledge. Think of where your computer's webcam is positioned, and what someone might see if they watched you constantly: your bedroom antics, perhaps, or your daily nude stroll around the house. They might even see you take your laptop to the toilet with you.

    [​IMG]

    An image uploaded to a hacking forum showing a woman looking at her computer as seen through her webcam.

    Discussion threads in the Remote Administration Tools section of HackForums.net overflow with webcam screenshots, to celebrate both "hot female slaves" and "ugly slaves".

    Alex goes by a pseudonym on HackForums that Fairfax Media has chosen to keep secret in order to conceal his identity. He's been a particularly active community member over the past 12 months, clocking more than 6000 posts – about 17 a day – while establishing himself as a helpful source of information for those new to RATs.
    "When I started, it was hard to learn," he says. "I was confused. I helped others because I wanted them to feel how I felt when I first started RATting – that feeling of excitement. I wanted to empower them."

    The teenager says he's never had a job, yet he's drawn a respectable income from his RAT activities for more than two years. His parents began asking questions when he connected his PayPal to his bank account, and sums of up to $500 at a time would flow in: profit from his Runescape thefts. "I sat down with them and told them what was going on," says Alex.

    "They understood. They said, 'If you get caught, you're in serious :censored.' My parents are laidback about it, because they knew I was smart with computers when I was younger. I've gotten way smarter since then." Their son may not have been completely honest about the precise source of income, though: "They don't really know what happens behind the scenes when I'm on the computer," he admits.

    Trend Micro's Adam Biviano isn't surprised by Alex's exploits, nor his age. "I've been in the anti-malware industry for about 15 years," he says. "A lot of these attacks start off with people who are quite young. It's that younger element that probably doesn't understand the legal implications of what they're doing. They think that because it's online, it's simply a bit of harmless fun.

    "We also see that those skills are put to far more malicious use these days, by moving on to target businesses, to target individuals by stealing their identities, even cross-border espionage using RATs,” he says, referring to a malware outbreak in the fractured state of Syria last year. "[Virtual goods theft] is one of the more benign uses of RATs, but it can certainly get nastier from there."

    The Attorney-General's Department responded to questions with this statement: "The Commonwealth Criminal Code contains a range of offences that apply to the unauthorised access to or modification of data, as well as offences that relate to the possession, control or supply of data with an intent to commit a computer offence."
    Federal penalties for these offences range from two to 10 years' imprisonment; the states and territories also have laws prohibiting the installation and use of surveillance devices, including listening, optical, tracking and data surveillance devices, which may also apply to those caught using RATs for malicious purposes.

    The Department of Broadband, Communications and the Digital Economy says it does not have a position statement on the use of RATs among private citizens.

    Remote access technology is not new – Windows has had this functionality in-built for many years – but the malware form of delivery is a constant headache for security companies such as Trend Micro, especially since some of these products are marketed as "FUD": fully undetectable, by either software or user.

    "That's the unfortunate part of the business we're in," says Biviano. "For a malware writer, we're part of their quality assurance process. A piece of malware will be sold for far more money than a competing product if it's undetectable by current anti-malware products. That's the sad reality of life right now."

    Trend Micro's labs deal with RAT infections on a daily basis, not just on personal computers, but increasingly, mobile devices. "This year alone, we're anticipating that we'll see nearly one million forms of malware just on [the] Android [mobile operating system]. A lot of these will have RAT built in. It's very rare these days that we see malware that doesn't have some sort of remote access capabilities."

    RATs have a long history of legitimate, non-malicious uses: IT departments throughout the world benefit daily from the ability to view their colleagues' screens when troubleshooting, as do workers who wish to access files on their home computer from the office.

    Chris Gatford, director of Sydney security consultancy HackLabs, uses this type of software when performing penetration testing for clients on four continents. "We're engaged by our customers to compromise their environment," says Gatford. "We use social engineering as the mechanism to gain access to the organisation, using "RAT-like" functionality in commercial security testing tools to perform our work.

    "In our experience, when performing this testing, we're very rarely detected, and therefore most organisations aren't able to detect it," he says. "I would say the majority of Australian organisations certainly wouldn't have the capability to detect whether they were infected by RATs, if [the software] was being used by attackers correctly."

    Using freely available RATs with names such as DarkComet and BlackShades, Alex was able to gain control of up to 1000 computers simultaneously. The dual monitors in his Wauchope bedroom became a window to the world. "I've had a guy in Vietnam working in a store," he says of his "slaves". "I've had a whole Asian family looking at the computer at once. I've had a lot of ugly people; one guy in his nineties or something, who looked like Santa Claus," he says, laughing.

    He has clicked onto people masturbating to child pornography. He didn't like that one bit. "I basically destroy their computer if I see them looking at that :censored, because that's just wrong." With a few commands, he'd delete their computer's "system32" folder; without those files, Windows operating systems won't function.

    But those days are behind Alex now. In mid-March, he posted a thread on HackForums saying goodbye to using Remote Administration Tools. The 17-year-old feels he's learned all there is to know about RATs. He's had some fun, made some money. Now he's setting his sights on learning to code, while balancing his Year 11 workload. He's fond of software design, IPT and English, but hates maths. He's looking forward to studying at university – something to do with computers, naturally – and building a career in penetration and vulnerability testing.

    The only thing that's stopped the teenager from accessing strangers' computers without their knowledge is boredom. That initial buzz – that feeling of being "the happiest kid in the world" – has long since worn off. Gross invasions of privacy have lost their lustre. Alex maintains that he never touched any bank accounts while RATting: "That :censored's lame," he says. "I know people do it, but it's a dog act."

    If he got caught by the police – not that he ever came close – he'd have justified his behaviour thus: "I know it was wrong to steal virtual goods, but I didn't do it for bad reasons.

    "I did it for educational purposes. Hacking isn't just about 'bad' things. Most people hack to learn."
    Asked whether he's proud of what he did, he laughs. "I kind of am! I felt bad when I got my stuff stolen, though." But it was okay when you did it to others?

    He pauses. "Now I'm confused ... How do I say it? RATting is bad, and good. People do it for knowledge; people do it to steal :censored; people do it to mess around. It's a thing that hackers these days need to learn, before they move on."

    Read more: http://www.smh.com.au/digital-life/...ur-computer-20130328-2gvwv.html#ixzz2PLdrwaRt
     
  2. FareezIzwar

    FareezIzwar Active Member

    Joined:
    30 May 2012
    Messages:
    22
    Likes Received:
    2
    Trophy Points:
    33
    can you give me this tutorial :psy
     
  3. Crackerz Wave

    Crackerz Wave The Dictator
    Staff Member Moderator VIP

    Joined:
    20 May 2012
    Messages:
    650
    Likes Received:
    128
    Trophy Points:
    141
    If there a tutorial...sure i want to learn.....Mr. Penguin ...u know about it? hahahaha
     
  4. Amkay

    Amkay The Wifier
    Staff Member Moderator Dev Team Wiki Editor VIP

    Joined:
    3 Jan 2013
    Messages:
    190
    Likes Received:
    80
    Trophy Points:
    226
    There is lots of them out there, but i just don't trust any...
    I managed to start a new project last year and program a RAT, it needed lot of work, effort and time i got the patience but no time...
    I learned how it works anyway:
    you create a server and 2 clients: One For the host (you) and one for the victim.
    Its like a chat client but the victim's client hides and you send words that the client detects and makes what it was programmed for,
    example: Lets say it was programmed to shutdown the computer when it gets the command "shtdwn", when you send that to the client, it makes the action... the difficult part is to create the server and associate it to the clients...
    Thanks for posting this Mr. Penguin it opens the eyes of the people: we shouldn't download anything we see...
     
  5. Mr. Penguin

    Mr. Penguin Administrator
    Staff Member Admin Moderator VIP

    Joined:
    18 May 2012
    Messages:
    3,087
    Likes Received:
    1,186
    Trophy Points:
    351
    Tutorial is on hackforums.net....

    Naughty. Btw I think they can disable the webcam indicator light through registry. People would be none the wiser.
     
  6. ImJoJo

    ImJoJo The One & Only
    VIP

    Joined:
    25 Jun 2012
    Messages:
    246
    Likes Received:
    107
    Trophy Points:
    191
    Thats crazy! :eek: I was doing a bit of research on that earlier..plus some dude around here got arrested for hacking into more than 200 computers and black-mailing female victims that had nude pictures of themselves saved on their comps..:eek:

    Sent from my LG-MS770 using Tapatalk 2
     
  7. rempit

    rempit Well-Known Member
    VIP

    Joined:
    4 Jun 2012
    Messages:
    237
    Likes Received:
    45
    Trophy Points:
    76
    Wow!

    What if someone hack into a beautiful sexy babe's webcam and sell the password online for $299.90
    What a good hack this is, this can be a huge money making business then !!;)
     
  8. ImJoJo

    ImJoJo The One & Only
    VIP

    Joined:
    25 Jun 2012
    Messages:
    246
    Likes Received:
    107
    Trophy Points:
    191
    Yes but thats black mail..:confused: one thing is ''sharing'' your neighbor's WiFi..:D but it really gets serious when an individual extorts another. Not cool!
    Sent from my LG-MS770 using Tapatalk 2
     
  9. firesheep

    firesheep Well-Known Member
    Donator I

    Joined:
    10 Jul 2012
    Messages:
    53
    Likes Received:
    8
    Trophy Points:
    120
    more tutorial join the group http://jomgegar.com/
     
  10. rempit

    rempit Well-Known Member
    VIP

    Joined:
    4 Jun 2012
    Messages:
    237
    Likes Received:
    45
    Trophy Points:
    76
    You are correct, we Xiaopanist are good decent peoples:)
     
  11. ImJoJo

    ImJoJo The One & Only
    VIP

    Joined:
    25 Jun 2012
    Messages:
    246
    Likes Received:
    107
    Trophy Points:
    191
    with evil skills..lol..but not to harm the innocent.;) Just that some people see this as "underworld material":eek: ...loll
     
  12. Mr. Penguin

    Mr. Penguin Administrator
    Staff Member Admin Moderator VIP

    Joined:
    18 May 2012
    Messages:
    3,087
    Likes Received:
    1,186
    Trophy Points:
    351
    One of my "girl" friends was wondering why her webcam light was on a few months ago. I told her sounds like someone hacked your system. She placed some tape over her webcam ever since :D I also told her to reformat and reinstall everything.
     
  13. Crackerz Wave

    Crackerz Wave The Dictator
    Staff Member Moderator VIP

    Joined:
    20 May 2012
    Messages:
    650
    Likes Received:
    128
    Trophy Points:
    141
    tell her..that is me..hahahahaha :p
     
  14. Mr. Penguin

    Mr. Penguin Administrator
    Staff Member Admin Moderator VIP

    Joined:
    18 May 2012
    Messages:
    3,087
    Likes Received:
    1,186
    Trophy Points:
    351
  15. Amkay

    Amkay The Wifier
    Staff Member Moderator Dev Team Wiki Editor VIP

    Joined:
    3 Jan 2013
    Messages:
    190
    Likes Received:
    80
    Trophy Points:
    226
    i disable my webcam when i don't use it... go to control panel> device manager> webcam > disable... you enable it the same way...
     
  16. Crackerz Wave

    Crackerz Wave The Dictator
    Staff Member Moderator VIP

    Joined:
    20 May 2012
    Messages:
    650
    Likes Received:
    128
    Trophy Points:
    141
    My laptop..dont have webcam :D ...but i learning it right now..btw why i get 503 error from hackforum? need to use google cache
     
  17. Amkay

    Amkay The Wifier
    Staff Member Moderator Dev Team Wiki Editor VIP

    Joined:
    3 Jan 2013
    Messages:
    190
    Likes Received:
    80
    Trophy Points:
    226
  18. Remington

    Remington Well-Known Member
    VIP

    Joined:
    17 Dec 2012
    Messages:
    168
    Likes Received:
    19
    Trophy Points:
    58
    I have my webcam and mic covered with electrical tape on my laptop. On my desktop I don't have a webcam or mic installed. I also have hardware and software firewalls + A/V on both and no WIFI enabled.
     
  19. ImJoJo

    ImJoJo The One & Only
    VIP

    Joined:
    25 Jun 2012
    Messages:
    246
    Likes Received:
    107
    Trophy Points:
    191
    Where I live we call you a "pimp daddy"...lol :psy
    --- Double Post Merged, 8 Apr 2013 ---
    Funny thing happened yesterday..Some guy brought me his laptop saying it had a camera problem. Asked me if I could repair it for him. As I booted the laptop, camera went ON by itself and this crazy FBI background...then he goes on to say that his other 2 laptops have the same problem..I was like WOW :eek: Dude you got hacked...they been watching you...first time I see someone get they're cam hacked (in person) So it's a common thing.
     
  20. vampiricbunny1800

    vampiricbunny1800 Well-Known Member
    Dev Team VIP

    Joined:
    8 Oct 2012
    Messages:
    242
    Likes Received:
    64
    Trophy Points:
    63
    LOL ya it be fun to do but i'm not in it for the cash just to see if i CAN do it mostly =)
     
Loading...
  • About Us

    We are a community mixed with professionals and beginners with an interest in wireless security, auditing and pentesting. Feel free to check out and upload resources.


    You can also find us on: Twitter and Facebook

  • Donate to Us

    Did you find our forums useful? Feel free to donate Bitcoin to us using the form below. Those who donate the equivlent of $10 USD or more will be upgraded to VIP membership. Don't have Bitcoin? Use your credit card to GO VIP here. Don't want to fork out some coin? There are other ways to GO VIP. Bitcoin: 1LMTGSoTyJWXuy2mQkHfgMzD7ez74x1Z8K