Typhon Project
Open in Telegram
Official Telegram channel for the Typhon Project. By: @lernaean_hydra0, @StopDropNLoad, and @SysKey08 Chat: https://t.me/+a8D0mjyxWJFjODU1 TO BUY: @StopDropNLoad
Show more338
Subscribers
No data24 hours
No data7 days
No data30 days
Posts Archive
Certified retard, how. You are just stupid. You can't research without buying π. Is your job litterally to just buy malware and be like "Oh i just spotted this in the wild!!1!1!1!1" all for ad revenue. Get your shit together and stop acting like a monkey with a typewriter
"never did any research" - no shit. seems likely you did try, but you just weren't good enough. too bad π
you're sitting here in our channel and getting offended when we point out your mistake of your bullshit inaccurate "research" and then tell us to leave you alone
We didn't wan't to respond to another article but because they are accusing us of being tied to a state sponsored APT we have no choice but to debunk it.
π Link: https://thecyberexpress.com/strontium-stealer-remote-trojan-lithiumrat/
π Debunk & Explanation:
β Cyber Espionage Group Strontium Stealer Launches Remote Access Trojan LithiumRAT.
β
Strontium Stealer is not a cyber espionage group. Both Strontium Stealer & LithiumRAT were developed by FusionCore.
β From Strontium Stealer to the launch of LithiumRAT β How it all began
Strontium, operating from Russia, gained notoriety in 2020 through a Microsoft report about their stealer activities targeting Office365.
β The information stealer was aimed at organizations belonging to the United States of America and the United Kingdom, involved in political elections.
The group managed to compromise more than 200 organizations between September 2019 and June 2020.
β The group targeted several high-profile entities.
β βIt was also identified in the Mueller report as the organization primary responsible for the attacks on the Democratic presidential campaign in 2016,β
a Microsoft blog read. They gained access through spear phishing emails.
β
None of this is true, this was a completely separate group unrelated to us in anyway.
They somehow managed to confuse us with FancyBear with no evidence,
apart from one of our devs just picking the same name as one of FancyBears many aliases accidentally because he thought it sounded cool.
π¬ Conclusion:
Anyone who contributed to this article as well as most of the other ones need to lose their jobs.
How tf was this even be allowed to be published? This shit goes to show how lazy and incompetent these people are,
anyone can just make shit up and call themselves a "researcher". You don't research shit.
CyberExpress, please fire all of your researchers. They aren't even trying to do their job.
Best regards,
Kys. π
this will be the builder UI (unfinished rn) The Carukia builder will be pretty similar but with much more features and the same colour palette of the panel. ~ NecroSyS π
The people have spoken! This will not be released until the Carukia project is out. This will be released as promised in the original Carukia announcement alongside Carukia Ransomware instead. Also have a bunch of other products that haven't been announced. Get ready for a mass sale on release of a variety of products you can add to your toolkit! (Keep in mind it will not be released until it is perfect in every way & things like the panel and a lot of the backend of Carukias builder will be done by Hydra so I have to wait for them to finish to continue development) π₯π
The Carukia Project is taking a while to complete, the panel needs to be finished to start writing communication and we also have to get the builder done.
Would you guys be interested in a smaller but similar project targeted more towards personal devices such as home computers for a lower price?
If I were to write it, it would have a lot of the same features but won't have lateral movement.
I was thinking of writing the following:
β’ RSA key generator.
β’ Automated decryption Telegram bot.
β’ Send key and client info to Telegram bot.
β’ Maybe some exfil stuff too.
It will still be good just not made for encrypting a whole network. btw this won't affect Carukia its still coming out
We reached 200 subscribers :)
Nothing special, just to tell I will be less active until 22nd as I'm going for vacations and just preparing for it, we have an update for TyphonLogger and NecroSyS added a save button to it, there's more to come in future updates. I also managed to get the obfuscator working π
All keylogger customers will be (or already are) added to a private group where all of you will receive updates.
π¨ LOOKING FOR COLLABS!
We are looking to collaborate with other Groups! If you would be interested in working with us or know people who will PM @StopDropNLoad.
Requirements:
β’ Must be part of an established group for at least 1 year.
β’ No scripting devs.
β’ Malware devs only.
β’ Experience targetting Windows specifically.
β’ Must have experience with sales and be ready to show proof of work.
β’ Must have some reputation (unless your team can make up for it with good products).
β’ Articles help.
Mutual Benefits:
π Expand our reach and grow our customer base.
π Get work done faster.
π Access to talented devs from both teams.
π Improve our products & learn new skills.
Rules:
β’ We do not disclose who we work with unless asked to.
β’ Anything sensitive stays between us including src and technical details.
β’ Opsec is a must. We don't want to know who you are or anything about you.
β’ Src sharing is only required for products we are both working on.
β’ Profits always 50/50.
π² Work with us and profit!
βοΈ Disclaimer:
This is not for recruitment. We want to work with other teams and combine our knowledge to create better products together to sell in both of our markets & to merge our customer base for mutual growth and mutual profit.
π CARUKIA RANSOMWARE - v1.0 (SOON)
β
AES-256 File Encryption.
β
RSA Key Encryption.
β
Wipe Key from Memory.
β
Automatic Privesc.
β
Delete Volume Shadow Copies.
β
Delete Event Logs.
β
Disable Sample Submission.
β
Disable Telemetry.
β
Disable Defender.
β
Whitelisted File Extensions & Folders.
β
Heavily Optimised (reached the speed limit for C# file encryption).
β
Encrypt All Drives.
β
User Friendly Builder.
β
Modern C2 Panel.
β
FUD with Various Evasion Techniques.
β
No Static Code for AV to Recognise (e.g. strings).
β
Written From Scratch.
β
Fast Asf.
β
Price matches the work put in.
β
Resource & Memory Efficient.
π To Do:
π Even More Optimisation.
π Finish Panel.
π Builder.
π Misc Features.
β° Why it's Taking so Long:
π Every Line of Code is Being Optimised each the limit of Speed & Efficiency.
π Working on Advanced Features.
π Avoiding Raising Detections.
π Low Level Functions.
π² Planned Price - $500 (Lifetime Only)
π² Accepting XMR & ETH Only.
π¨ COMING SOON! π¨
β‘οΈ But will not be released until it is perfect!
~> NecroSyS π
