How to keep your victims more time infected 10-13-2012, 12:01 PM
#1
Here I will write about keeping your slaves longer.
Use a Dynamic IP
Have you ever wondered why you use No-IP DUC when you setup a RAT (for example)? It is because most people's IPs change often. For example, if you told your RAT to connect to 192.168.1.1 and your IP changes to 192.168.1.2, your RAT will not work. So in order to make sure your IP will not change, use a dynamic DNS (For example: DynDns or No-ip).
FUDing the server
Of course you want to make sure your RAT is FUD to get more installs. But you have to scan every day to see when it becomes detected. You need to make it FUD immediately so the AV of your victim won't detect it first.
Use Injection Option
Some people say that it makes it less stable or more detectable but choose to inject into their default browser if you are able to.
This information is very basic, but can stop you from losing many victims.
Use a Dynamic IP
Have you ever wondered why you use No-IP DUC when you setup a RAT (for example)? It is because most people's IPs change often. For example, if you told your RAT to connect to 192.168.1.1 and your IP changes to 192.168.1.2, your RAT will not work. So in order to make sure your IP will not change, use a dynamic DNS (For example: DynDns or No-ip).
FUDing the server
Of course you want to make sure your RAT is FUD to get more installs. But you have to scan every day to see when it becomes detected. You need to make it FUD immediately so the AV of your victim won't detect it first.
Use Injection Option
Some people say that it makes it less stable or more detectable but choose to inject into their default browser if you are able to.
This information is very basic, but can stop you from losing many victims.