Caught A Hacker - Full Personal Details :D

Status
Not open for further replies.

stealthisblog

Regular Member
Joined
May 26, 2008
Messages
289
Reaction score
239
Hey. So i was searching around last night and found a post where someone apparently posted GodCPA for download. I thought what the hell, I'll give it a shot. So I downloaded it and ran it, and nothing happened. I tried like 4 times and still nothing happened. Thats when I realized I probably just got trojaned...

So I turned on wireshark and sniffed the traffic


As you can see the exe tried to log into an FTP server, which means it was most likely a firefox/IE password stealer. For some reason the username and password combo the guy put into the exe didn't work anymore though... Anyway, so I decided to check out some info on the domain:

And I saw that this was a dedicated box since thats what the host offered and there were only 4 sites on it. So I got the list of sites and decided to do a whois on each one. The first site gave me this:


The site was about CPA Greed, which would link the guy to the original fake CpaGod trojan... and after I scrolled down, I found:

:D Owned! So what do you guys think, is this the real guy? I think it is, one because its a dedi box and the sites about CPA... I'm thinking about giving him a call to ask :P
 
Last edited by a moderator:
Report him to the affiliate networks and hosting... All his account will be terminated... Then you can give him a call (block your # first).
 
:)) yeah .. a call would scare him so make it a good call so you can laugh at .. tell him your CIA (or someone) and found some illegal activities with his IP
 
No offense, but this is a waste of time. Instead of dedicating it to make some dough, you're wasting it playing pranks on a wannabe hacker. Time is money.

Although I do agree on the "report him to the affiliate network and hosting" part. :rolleyes:
 
Last edited:
well, I initially wasn't trying to play pranks on him. I started this because I wanted to go into his FTP and delete any logs stolen from my computer to protect me... but THEN I decided to screw around :P You can't work all day, you gotta have a little fun too! I'm gonna send an email out to the host now, then maybe call the guy on skype and record it later... it should be funny :D
 
:)) yeah .. a call would scare him so make it a good call so you can laugh at .. tell him your CIA (or someone) and found some illegal activities with his IP

haha i would love to see the look on his face if you done that xD
 
I just called host monster informing them of stolen content and that the user was distrubting trojans... They didn't even ask me the domain name...They basically said they want a DMCA from the owner of the stolen content.... WTF I've never heard suck crap from a web hosting company most will ask the domain name and hit terminate without question.

I forget which mod/admin owns CPAGREED but you should contact hostmonster as they are using your site images,etc.


[edit] Report now filed with Click Bank
 
Last edited:
maybe the owner of GodCPA (who is a member here) got you for trying to download his software for free.
 
it those are his real info's than you should stop calling him 'hacker'
 
I just called host monster informing them of stolen content and that the user was distrubting trojans... They didn't even ask me the domain name...They basically said they want a DMCA from the owner of the stolen content.... WTF I've never heard suck crap from a web hosting company most will ask the domain name and hit terminate without question.

I forget which mod/admin owns CPAGREED but you should contact hostmonster as they are using your site images,etc.


[edit] Report now filed with Click Bank

Wouldn't that be kinda stupid though? Banning the accounts with no proof? Then I could just call your host, make up some sort of BS and get all your accounts terminated. Wanting to see an actual DMCA notice means they have some sort of safeguards in place & that is a good thing.
 
*sigh* I just came across someone selling my software as his own.

This shit happens all the time, and it sucks.

BUT, I'm literally about 25 minutes from carrollton, where this guy lives. Hmmmm......
 
He is definitely not a "Hacker", Only lamers send trojan's. There's a clear difference between "Hacker" and "Cracker". Hes a wannabe "Cracker", If he got caught that easy i wouldn't want to blackmail him to do stuff for me on any level..lol
 
If his FTP is down chances are that he was already caught and forced to remove it or he gave up and shut the thing down.
 
report him first, call him after, record the call and let us all listen to that conversation and laugh.
 
From the topic title I was about to bitch about people being vigitlantes for osmeone jacking and reposting forbidden softs.. but this takes the cake and made me eat crow. Hahahahaha, that stupid fuck tried to use a trojan to callback with passwords and hoped no one would notice? The soft didn't even work.

Good job

l0cke
 
maybe the owner of GodCPA (who is a member here) got you for trying to download his software for free.


That's what the owner of Xrumer do . They bind trojan with their software and distribute on the warez .. :p:p . It's like a kind of spam to make their soft become more popular and make peaple buy it ! hehe ..
 
Status
Not open for further replies.
Back
Top