βοΈ { ππ ππ―π©π’π±π±π'π° ππ¬π²π«π€π’ } βοΈ
Closed channel
π§ͺ ππππβππΈππ πΈπΉπππ πΌππΌβππβπβπΎπ§ͺ You search how to setup windows on VM, what credit reports are or how checks work? We show you practical ones to understand β οΈ Unauthorized advertisments in comments will lead to a ban from channel :)
Show moreNo data
Subscribers
+724 hours
+657 days
+16630 days
Posts Archive
πOption 1: if we realized that Account Payable is doing this, then we make a fake letter from the counter party's CFO to our CFO, and he gives instructions to Account Payable in the form of a letter with a forward. Here we must be careful so that Account Payable does not write to the counter party directly.
πOption 2: we make an email of the counter party and write from it. We can do this from the counter party's domain (spoof), or with a domain similar to the counter party.
Now it's time to work with filters. If we have admin access, we can make a filter for outgoing emails so that counter parties do not receive letters from the corporation. If there is no such access, we hope for luck.
It is also necessary to make an incoming filter so that letters from the counter party do not come to the inbox but to another folder. At this time, we are already monitoring the target email all day long, manually checking letters from the counter party, if there is nothing like that, we manually drag it to the inbox.
After all, all emails are active, one extra movement and all the work goes down the drain.
Be careful with email forwarding. Forwarding is usually monitored by the admin, if you do not know how the admin panel works, it is better not to mess with the forwarder.
You can pin emails. This is not a hacker pinning with cobalt strike, it works like this - find trusted emails with whom a person corresponds, and make a similar email. It is better if this dialog contains some files. Next, you wedge into the dialog and save the info. If you lose access to the mailbox, you can initiate the dialog again - for example, say "is this table the correct option?" and make access to the table via a link so that the person enters the mailbox data and as a result this table is there.
π Conclusions
Redirecting payments does not always work. It is very important to be patient and wait for a good moment. For example, when a company for some reason wants to change its bank account to another. On the other hand, if you just wait, you will not redirect anything. There you already need to look at the situation, and this will only come with experience. Experience is hundreds of thousands that you will lose due to mistakes. But with each mistake, the skill will grow. A good BEC allows you to send payments for weeks, or receive a dozen payments from one substitution.
In some corporations, BEC is impossible due to the algorithm for changing the details, but what kind of algorithm this is is beyond the scope of this post.
π Bonus track
You found an email where a company changed the bank account details a week or two ago. Missed the chance? Nope. There is such a procedure, recalling a letter. Ask to recall the letter with the data as incorrect and write a correct one with your data. Be prepared to make a call or accept a call, maybe even several. If you do everything correctly, the payments will go where you need them.
πππ
π BEC is a form of pre-texting β a type of social engineering where individuals are usually tricked into making large money transfers to a fraudster posing as a legitimate entity such as a supplier. On other occasions, the scammer impersonates a CEO or CFO and uses their authority to demand a finance team member make a wire transfer.
The threat actor often compromises email accounts and monitors messages from legitimate entities in order to make their requests sound more realistic.
Business Email Compromise (BEC) is a payment forwarding to where you need it, using access to the corporation's emails.
π Basic concepts
There are two types of payments in corporations:
πOutgoing, they are called Account Payable (AP)
πIncoming, they are called Account Receivable (AR).
It is important to understand that our goal is not to initiate a payment, but to forward it by replacing the bank details. Initiation is also possible, but it is more difficult and works in fewer cases.
If we want to forward AR, we will need a bank account for the same (this is important) company name, but in a different bank. To find out this data, we need a document - either an Invoice or Wire Instructions. They are usually easy to find.
But if we forward AP, we will need a new account for the counter party to whom the money will go.
π Hierarchy in corporations
To understand how to forward payments, you need to understand who is responsible for them.
πChief Financial Officer (CFO) - CFO, the main boss for payments, in large corporations he usually does not deal directly with payments. In small companies, where the finance department has up to 5 people, he can send payments himself.
πController - subordinate to the CFO, usually in medium and large companies. In medium-sized companies, he sends payments himself, in large ones he usually does not.
πAccount payable - a lower-level clerk who deals with outgoing payments
Account receivable - a lower-level clerk who deals with incoming payments
βΎAds: This method brought to you by Scarletta buy the spamming class to spam your own bank logs π
π Intelligence algorithm
We find employees who deal with payments.
Methods:
πWe look for mail groups AP, AR, Payments and there will be emails of employees
πWe search on the website of the corporation, through Google, Zoominfo, Rocketrich
Next, we look for AR and AP debts. Often they are walking around in the form of Excel tables, if this is not available, look at payment orders and / or invoices.
In some companies, large amounts are in AR, in others in AP, and in some both.
We choose which direction (AP or AR) we will change and who it will be (the corp itself or the counterparty).
π Now it's time to study how the process of changing the details is carried out.
In small companies, this can be just a letter, or a letter with a call.
Sometimes this can be done by giving instructions from a senior to a junior employee. There are many options, it is impossible to describe them all.
πππ
π BEC is a form of pre-texting β a type of social engineering where individuals are usually tricked into making large money transfers to a fraudster posing as a legitimate entity such as a supplier. On other occasions, the scammer impersonates a CEO or CFO and uses their authority to demand a finance team member make a wire transfer.
The threat actor often compromises email accounts and monitors messages from legitimate entities in order to make their requests sound more realistic.
Business Email Compromise (BEC) is a payment forwarding to where you need it, using access to the corporation's emails.
π Basic concepts
There are two types of payments in corporations:
πOutgoing, they are called Account Payable (AP)
πIncoming, they are called Account Receivable (AR).
It is important to understand that our goal is not to initiate a payment, but to forward it by replacing the bank details. Initiation is also possible, but it is more difficult and works in fewer cases.
If we want to forward AR, we will need a bank account for the same (this is important) company name, but in a different bank. To find out this data, we need a document - either an Invoice or Wire Instructions. They are usually easy to find.
But if we forward AP, we will need a new account for the counter party to whom the money will go.
π Hierarchy in corporations
To understand how to forward payments, you need to understand who is responsible for them.
πChief Financial Officer (CFO) - CFO, the main boss for payments, in large corporations he usually does not deal directly with payments. In small companies, where the finance department has up to 5 people, he can send payments himself.
πController - subordinate to the CFO, usually in medium and large companies. In medium-sized companies, he sends payments himself, in large ones he usually does not.
πAccount payable - a lower-level clerk who deals with outgoing payments
Account receivable - a lower-level clerk who deals with incoming payments
βΎAds: This method brought to you by Scarletta buy the spamming class to spam your own bank logs π
π Intelligence algorithm
We find employees who deal with payments.
Methods:
πWe look for mail groups AP, AR, Payments and there will be emails of employees
πWe search on the website of the corporation, through Google, Zoominfo, Rocketrich
Next, we look for AR and AP debts. Often they are walking around in the form of Excel tables, if this is not available, look at payment orders and / or invoices.
In some companies, large amounts are in AR, in others in AP, and in some both.
We choose which direction (AP or AR) we will change and who it will be (the corp itself or the counterparty).
π Now it's time to study how the process of changing the details is carried out.
In small companies, this can be just a letter, or a letter with a call.
Sometimes this can be done by giving instructions from a senior to a junior employee. There are many options, it is impossible to describe them all.
π¦ πππππ ππππππππ π¦
Free β
Tutorials MATCH
1οΈβ£ BUY T-MOBILE ISP
2οΈβ£ Create a new Gmail account or Outlook
3οΈβ£ Connect your T-Mobile and search for Match check and select the 7 days free trial
4οΈβ£ Do it Man seeking for Man
ο»Ώο»Ώ5οΈβ£ Put zip code and select views photos
6οΈβ£ Fill in your day and month but put the year 1975 it's necessary
7οΈβ£ Put name and continue
8οΈβ£ After you put the name it will carry you to next page with says verify down and skip at the top right
9οΈβ£ If you don't find skip put the mouse pointer on the MATCH text and left click skip will show
ο»Ώο»Ώο»Ώο»Ώ
1οΈβ£0οΈβ£ Leave the account for 1 hour after you skip the verification
ο»Ώο»Ώο»Ώο»Ώ
1οΈβ£1οΈβ£ After you are back find a picture that matches with the age and upload it should be a selfie to make it look realπ€³
Hey everyone,
Kasper here, I owe you an explanation for my longer-than-usual absence. Unfortunately, I've been in the hospital dealing with some serious health issues that kept me completely offline and unable to respond to anyone. While this has happened before due to my health, I know this time was much longer than usual.
I'm finally back home now and slowly recovering. Though I'm not yet at 100%, I really missed our community and wanted to reconnect with you all. I'd love to hear what exciting developments and updates I've missed during this time.
I'll be gradually getting back into the swing of things as my health allows. Your understanding during this challenging period means more to me than I can express.
Looking forward to catching up with everyone!
P.S. Feel free to share any important updates or cool projects I should work on
@hackers_assemble
HTB CWEE - Certified Web Exploitation Expert Learning Path
Info :
https://academy.hackthebox.com/preview/certifications/htb-certified-web-exploitation-expert
HTB Academy - Bug Bounty Hunter Path 2024
Info :
https://academy.hackthebox.com/path/preview/bug-bounty-hunter
HTB Academy β Penetration Tester Job Rule Path 2024.11
Info : https://academy.hackthebox.com/preview/certifications/htb-certified-penetration-testing-specialist
Ways You Can Cashout Bank Logsπ΅
β
Transfers
β
Direct Deposit
β
Wire Transfer
β
Zelle
β
ACH
β
Cook/Send Check to Cashout
β
Mobile Deposit
β
Wire Check
β
Bill pay
β
DDA
β
CashApp
β
Prepaid Banks
One of the easiest bank to cashout from Huntington Bank logs (Direct Deposit to CashApp )
And to the BTC lovers buy Bluebird And Cashout through
βοΈβοΈβοΈπ₯βοΈβοΈβοΈβοΈ
π FRAUDGPT WEB [FREE] - https://flowgpt.com/p/fraudgpt-16
4 Sites you can use to edit a flight ticket
keyflight.io/fake
fakeflighttickets.com
jotform.com/pdf-templates/β¦
dummyticket.com
πππππππππππ
ππππππ 2οΈβ£0οΈβ£2οΈβ£4οΈβ£
Bypass Linkvertise URLs very simply with python script.
Script is using fast API and is open source.
Required modules :
pip install requests
pip install colorama
Run tool :
python3 linkvertise.py -u https://link-target.net/434979/1342431π Malware and cryptography 23: encrypt/decrypt file via TEA. Simple C/C++ example.
https://cocomelonc.github.io/malware/2023/12/25/malware-cryptography-23.html
π Malware and cryptography 24: encrypt/decrypt file via Madryga. Simple C/C++ example.
https://cocomelonc.github.io/malware/2024/01/16/malware-cryptography-24.html
π Malware and cryptography 25: encrypt/decrypt payload via RC6. Simple C/C++ example.
https://cocomelonc.github.io/malware/2024/02/21/malware-cryptography-25.html
π Malware AV/VM evasion - part 15: WinAPI GetModuleHandle implementation. Simple C++ example.
https://cocomelonc.github.io/malware/2023/04/08/malware-av-evasion-15.html
π Malware AV/VM evasion - part 16: WinAPI GetProcAddress implementation. Simple C++ example.
https://cocomelonc.github.io/malware/2023/04/16/malware-av-evasion-16.html
π Malware AV/VM evasion - part 17: bypass UAC via fodhelper.exe. Simple C++ example.
https://cocomelonc.github.io/malware/2023/06/19/malware-av-evasion-17.html
π Malware AV/VM evasion - part 18: encrypt/decrypt payload via modular multiplication-based block cipher. Simple C++ example.
https://cocomelonc.github.io/malware/2023/06/26/malware-av-evasion-18.html
π Malware development: persistence - part 22. Windows Setup. Simple C++ example.
https://cocomelonc.github.io/persistence/2023/07/16/malware-pers-22.html
π Malware and cryptography 1: encrypt/decrypt payload via RC5. Simple C++ example.
https://cocomelonc.github.io/malware/2023/08/13/malware-cryptography-1.html
π Malware and cryptography 20: encrypt/decrypt payload via Skipjack. Simple C++ example.
https://cocomelonc.github.io/malware/2023/08/28/malware-cryptography-20.html
π Malware and cryptography 21: encrypt/decrypt payload via WAKE. Simple C++ example.
https://cocomelonc.github.io/malware/2023/10/20/malware-cryptography-21.html
πππππππ
π Malware development: persistence - part 1. Registry run keys. C++ example.
https://cocomelonc.github.io/tutorial/2022/04/20/malware-pers-1.html
π Malware development: persistence - part 2. Screensaver hijack. C++ example.
https://cocomelonc.github.io/tutorial/2022/04/26/malware-pers-2.html
π Malware development: persistence - part 3. COM DLL hijack.
https://cocomelonc.github.io/tutorial/2022/05/02/malware-pers-3.html
π Malware development: persistence - part 4. Windows services. Simple C++ example.
https://cocomelonc.github.io/tutorial/2022/05/09/malware-pers-4.html
π Malware development: persistence - part 5. AppInit_DLLs. Simple C++ example.
https://cocomelonc.github.io/tutorial/2022/04/20/malware-pers-5.html
π Malware development: persistence - part 6. Windows netsh helper DLL. Simple C++ example.
https://cocomelonc.github.io/tutorial/2022/05/29/malware-pers-6.html
π Malware AV evasion: part 7. Disable Windows Defender. Simple C++ example.
https://cocomelonc.github.io/tutorial/2022/06/05/malware-av-evasion-7.html
π Malware AV evasion - part 8. Encode payload via Z85 algorithm. C++ example.
https://cocomelonc.github.io/malware/2022/07/30/malware-av-evasion-8.html
π Malware AV evasion - part 9. Encrypt base64 encoded payload via RC4. C++ example.
https://cocomelonc.github.io/malware/2022/08/16/malware-av-evasion-9.html
π Malware AV/VM evasion - part 10: anti-debugging. NtGlobalFlag. Simple C++ example.
https://cocomelonc.github.io/malware/2022/09/15/malware-av-evasion-10.html
π Malware AV/VM evasion - part 11: encrypt payload via DES. Simple C++ example.
https://cocomelonc.github.io/malware/2023/02/12/malware-av-evasion-11.html
π Malware AV/VM evasion - part 12: encrypt/decrypt payload via TEA. Simple C++ example
https://cocomelonc.github.io/malware/2023/02/20/malware-av-evasion-12.html
π Malware AV/VM evasion - part 13: encrypt/decrypt payload via Madryga. Simple C++ example
https://cocomelonc.github.io/malware/2023/03/09/malware-av-evasion-13.html
π Malware AV/VM evasion - part 14: encrypt/decrypt payload via A5/1. Bypass Kaspersky AV. Simple C++ example
https://cocomelonc.github.io/malware/2023/03/24/malware-av-evasion-14.html
π Malware AV/VM evasion - part 15: WinAPI GetModuleHandle implementation. Simple C++ example.
https://cocomelonc.github.io/malware/2023/04/08/malware-av-evasion-15.html
π Malware AV/VM evasion - part 16: WinAPI GetProcAddress implementation. Simple C++ example.
https://cocomelonc.github.io/malware/2023/04/16/malware-av-evasion-16.html
π Malware AV/VM evasion - part 17: bypass UAC via fodhelper.exe. Simple C++ example.
https://cocomelonc.github.io/malware/2023/06/19/malware-av-evasion-17.html
π Malware AV/VM evasion - part 18: encrypt/decrypt payload via modular multiplication-based block cipher. Simple C++ example.
https://cocomelonc.github.io/malware/2023/06/26/malware-av-evasion-18.html
π Malware development: persistence - part 22. Windows Setup. Simple C++ example.
https://cocomelonc.github.io/persistence/2023/07/16/malware-pers-22.html
π Malware and cryptography 1: encrypt/decrypt payload via RC5. Simple C++ example.
https://cocomelonc.github.io/malware/2023/08/13/malware-cryptography-1.html
π Malware and cryptography 20: encrypt/decrypt payload via Skipjack. Simple C++ example.
https://cocomelonc.github.io/malware/2023/08/28/malware-cryptography-20.html
π Malware and cryptography 21: encrypt/decrypt payload via WAKE. Simple C++ example.
https://cocomelonc.github.io/malware/2023/10/20/malware-cryptography-21.html
π Malware development: persistence - part 23. LNK files. Simple Powershell example.
https://cocomelonc.github.io/persistence/2023/12/10/malware-pers-23.html
π Malware development: persistence - part 24. StartupApproved. Simple C example.
https://cocomelonc.github.io/persistence/2024/03/12/malware-pers-24.html
π Malware and cryptography 22: encrypt/decrypt payload via XTEA. Simple C++ example.
https://cocomelonc.github.io/malware/2023/11/23/malware-cryptography-22.html
ππππππ
KISMIA TUTORIAL
πConnect Your Socks
πUse T-Mobile Canada / US
πCheck Proxy Strength Using Whoer.net
πUse Brave Browser
πNow Use This Link Below To Open The Site https://kismia.com/
πUse Fresh Outlook or Gmail
πAge 1967/05/01
πUse a Very Clear Selfie Picture Within the Range of Old Age
π¦ SOME CU YOU/YOUR PAL CAN OPEN FOR DROP π¦
1. Alliant Credit Union
2. America First Credit Union
3. American Airlines Federal Credit Union
4. Arizona Federal Credit Union
5. BECU (Boeing Employees Credit Union)
6. Bethpage Federal Credit Union
7. California Coast Credit Union
8. Chartway Federal Credit Union
9. CITIZENS Equity First Credit Union (CEFCU)
10. Connexus Credit Union
11. Consumers Credit Union
12. Corning Credit Union
13. Credit Union of Texas
14. DCU (Digital Federal Credit Union)
15. Desert Financial Credit Union
16. DuPage Credit Union
17. Ent Credit Union
18. Fairwinds Credit Union
19. First Tech Federal Credit Union
20. Golden 1 Credit Union
21. GTE Financial Credit Union
22. Hanscom Federal Credit Union
23. Hudson Valley Credit Union
24. Illinois Community Credit Union
25. Keesler Federal Credit Union
26. Lake Michigan Credit Union
27. Langley Federal Credit Union
28. LAPFCU (Los Angeles Police Federal Credit Union)
29. LendingClub Bank Credit Union
30. Logix Federal Credit Union
31. MECU of Baltimore
32. Mission Federal Credit Union
33. Navy Federal Credit Union
34. NASA Federal Credit Union
35. Northeast Credit Union
36. Notre Dame Federal Credit Union
37. Nusenda Credit Union
38. OnPoint Community Credit Union
39. Orange Countyβs Credit Union
40. Oregon Community Credit Union
41. Pen Air Federal Credit Union
42. PenFed Credit Union
43. Premier Members Credit Union
44. PSECU (Pennsylvania State Employees Credit Union)
45. Randolph-Brooks Federal Credit Union (RBFCU)
46. Redstone Federal Credit Union
47. Rivermark Community Credit Union
48. San Diego County Credit Union (SDCCU)
49. Security Service Federal Credit Union
50. SEFCU (State Employees Federal Credit Union)
51. Service Credit Union
52. Spokane Teachers Credit Union (STCU)
53. Star One Credit Union
54. State Department Federal Credit Union (SDFCU)
55. Suncoast Credit Union
56. Teachers Federal Credit Union
57. Texans Credit Union
58. The Summit Federal Credit Union
59. Tinker Federal Credit Union
60. Tower Federal Credit Union
61. Travis Credit Union
62. Tropical Financial Credit Union
63. TruWest Credit Union
64. Truliant Federal Credit Union
65. TwinStar Credit Union
66. University Federal Credit Union (UFCU)
67. US Community Credit Union
68. US Eagle Federal Credit Union
69. VyStar Credit Union
70. Wings Financial Credit Union
71. Xceed Financial Credit Union
72. Zia Credit Union
73. Advancial Federal Credit Union
74. Affinity Federal Credit Union
75. Alaska USA Federal Credit Union
76. Allegacy Federal Credit Union
77. Andrews Federal Credit Union
78. Bellco Credit Union
79. Blue Federal Credit Union
80. BMO Harris Bank Credit Union
81. Bourns Employees Federal Credit Union
82. Cabrillo Credit Union
83. CapEd Credit Union
84. Cardinal Credit Union
85. Carolina Foothills Federal Credit Union
86. Centra Credit Union
87. Charlotte Metro Federal Credit Union
88. Coastal Credit Union
89. CommonWealth One Federal Credit Union
90. Community First Credit Union of Florida
91. Cove Federal Credit Union
92. Dover Federal Credit Union
93. Dupaco Community Credit Union
94. Elevations Credit Union
95. Empower Federal Credit Union
96. Envista Credit Union
97. Equity Federal Credit Union
98. F&A Federal Credit Union
99. First Financial Credit Union
100. Freedom First Credit Union
ππππ ππππππ
1οΈβ£ Download Ingo money on Android or iPhone:
π iPhone : https://apps.apple.com/us/app/ingo-money-app-cash-checks/id656846983
π± Android : https://play.google.com/store/apps/details?id=com.chexar.ingo.android&hl=en
2οΈβ£ Signup using some fullz such as SSN, DOB, Full name and Address
3οΈβ£ Click on add account account.
4οΈβ£ Click on the preferred account and link it
5οΈβ£ Buy logs with routine number (RN) and account number (AN)
6οΈβ£ Search the log owners name via background check websites
7οΈβ£ Use the routine number to search for the bank address
8οΈβ£ Create an account or Build and link the bank log to it and send check via email
9οΈβ£ Print out the check on an A4 paper if you dont have money for check book and trim all excess off it
1οΈβ£0οΈβ£ Go back to Ingo money app and click on check deposit then use the printed
1οΈβ£1οΈβ£ You have just successfully made a payment to either bank account or credit or prepaid card
βΉοΈ Note that all transaction should be less than 5000$ at once
β οΈ I SAW IT ON GREEN APP I NEVER TRY IT
Repost from 10KBIZ.COM FREE GROUP
+4
πNEW TRADE-LINE STOCKπ
Because of the extra $2000 I made today, Iβm going to give out discounts. Here how they will work.
- Insurance Automatically added
- $50 Group can get any line $50
- $49.99 BOGO (equal or lesser value)
- $50 Group get 3 doing BOGO π
- Joining $50 Group you can get BOGO
Dm me
@tenkbizcc
Order here
Chasetradelines.com
Join my discount Tradeline group
https://t.me/+RIQeXBRkBekzNzUx
ππππ
HOW TO CASHOUT COMPANY LOGS
First you can buy company logπ¦
When you buy company logs, it comes with:
βοΈAccount name
βοΈAccount address
βοΈAccount number
βοΈRouting number
βοΈEIN / SSN Number
βοΈBank phone number etc..
You donβt need a third party app to link account to check for trial deposits like personal accounts.
Itβs very simple to get trial deposits with company logsπ¦. All you have to do is to call the phone number attached to the log you bought (itβs a toll free number) and follow the instructions from the automated machine ( you will be asked for the account number and the last four digits or all the nine digits or the EIN or the SSN after that you can now access all the information you need thatβs from the balance to the account activities or transactions )
πππππππ
ππππ πππ πππ
Login the bankπ¦you want to run the ACH on.
Go to transfer and locate and click on external account. You will be given a page to input you account and routing number. Some banks will ask for the name on account and nickname, type in the name of the account you are loading and type in the name of the company log at the nickname place and submitπ.
βΎAds: This method brought to you by Scarletta buy the spamming class to spam your own bank logs π
Now you are good to make a transfer from the linked company log to your account. After successfully verifying your linked company log with the trial deposit. Click on transfer, you will see (transfer from) select the company log you linked. And you will see transfer to, select your checking or savings account and input amount you want to transfer and submit. In 3 days funds will be available to withdraw.
πππππππ
ππππ πππ ππ
πππππ π³π³π³π³
You login the credit card site you want to load and head to payments. Click on payment and you will be ask which account to pay from. Just add the company log account number and routing number ( no trial deposit is needed for cc top up) When asked for the amount to pay, make sure you pay the full βCurrent balanceβ.. Current balance on a Cc is the debt that needs to be paid for the money to be Available. In 1 to 3 days funds will be available to withdraw. Join the channel below now Telegram will soon take this channel down. Get close and keep updated
