[Mr.Kurd]

Wow, I used to do that waaaay back in the day. Back then, I was just 16 with two copies of DarkComet, one that was mine and was legitimate, and one infected with my stub that I put on youtube. The youtube channel I set up at the time is still active, but the stub no longer works since I haven't had access to the DNS for a good 7 or 8 years.

It's the oldest trick in the book, even a legitimate RAT will require you to disable your antivirus anyway so that's why I personally recommend Sandboxie for testing your own stubs and potentially infected RATs and other software. If Sandboxie won't run it, it's likely infected as some RATs/Trojans have an Anti-Sandboxie feature.

Luckily, I was also Good Guy Greg about it, so after having fun with a few of my slaves I taught 2 or 3 of them how to do it and we turned it into a business.

---

This is totally True! Young Hackers will do and install anything to make his Trojan Sever and Port forwarding working. Njrat as mentioned in the article is one of RAT used for variety and is very popular among middle east hackers. This RAT was the first tools I used and still used by too many hackers around.

Correct me if I'm wrong, wasn't the creator of NjRAT a Jordanian hacker? Also, it was written in vb.net if I recall correctly, using Framework 4.5

This is also a very real risk among free trojan horses so be on the lookout and sandbox it first.

Yep, Made by Arab but not sure where he was from and he stopped supporting NjRat after version 0 7. Something was new for me Anti-Sandboxie. Never heard about it, Thank you for the info.