(12-13-2012, 08:08 PM)ohx666 Wrote: I have some information about this:

As most here surely know, Blackshades NET was/is backdoored by Blackshades itself. They built in a feature to send commands to bots from every paying customer. (download & exec -> users reported losing bots)

The Old Warrior, from trojanforge, noticed this. He uploaded an video on YouTube, and made an thread on HF. His video was interesting...

Blackshades said "ok sorry... there is a feature like this, but we will remove it in the next version."
However, for the next version, The Old Warrior made an 2nd video... showing that the backdoor is still in the bot, but they tried to hide it and encrypted the command.

The Old Warrior cracked these version(s), removed the backdoor. I don't know whether this is true or not... but the cracked version seems to be the only one without backdoor. I don't know what's about the current release (5.4), but I would not trust it 100%.

Maybe the backdoor was really removed... but backdooring and stealing bots from paying customers is not very nice.

The RAT itself has many useful features other "public" RATs don't have. There are some bugs... but its not a bad RAT.


Edit: Latest crack from TOW is version 5.3