Quote:
|
Originally Posted by kirilnefimov
Selling firmware with built-in software Raspberry pi zero w.
It is loaded in base64 after it is converted to dll and starts, not one antivirus sees it, it works on 4 ATM models.
Nautilys, Ncr, Wincor, Diebold.
Remote control via smartphone or laptop via Wifi.
Sale only through a guarantor.
2000$
PM.
https://imgur.com/a/Ohu6Q7f |
This guy cant even spell "Nautilus" correctly and you expect his "tool" will work when he is making such simple mistakes?
Working on ALL available ATMs, easy-peasy, no AV detection.
Basically plug-n-play. Even monkey can do it.
Now - simple question:
WHY HE IS SELLING IT FOR 2k? He can do 10x times more in matter of minutes. All he need is to take a car and drive to nearby ATM.
But instead of making 100k in 1 hour, he is making a screenshot of 4 buttons and put some fancy "base64" word which means a lot to someone who understand nothing and selling his priceless tool FOR 2 grands. TWO FUCKING GRANDS.
I'm surprised he did not put this video to the initial post (youtube.com/watch?v=3HYA0MvizpM) to look it even more convincing.
Its going to be 1 out of 3:
1. He want to rip you off because its non working garbage.
2. If you will insist to use escrow - ask yourself how you going to prove to escrow that "tool" is not working. You gonna film yourself?
3. He want to use you as a mule who will do testing for him, because he have no balls to do it by himself.
I am familiar with "idea" (which was pretty good looking "on paper" from github) of this "tool" but unfortunately he is one of those guys who never saw ATM with open service area in real life and not tested it on real ATM. We did it few months ago and its useless in real life scenario.
To make it work assuming he did not fucked up in code of converting from base64 to file (keep in mind that he make mistake in pretty simple thing before, which is saying ALOT about him as "programmer") and assuming that his public malware is working (which is not the case) ALL following variables must met:
1. Anti virus must be disabled (enabled by default).
2. Whitelisting solution (which is mandatory nowdays) must be disabled. (enabled by default)
3. USB control solutions must be disabled. (enabled by default)
4. Powershell must be enabled. (disabled by default)
5. I will not even mention vendor related "tricks", like NCR which is not allowing ANY interactions with keyboard, mouse or USB unless its admin account.
PCI DSS - your friend to understand how you can get your money.
I will not go even further in details because whitehats allready watching it (twitter.com/r3c0nst/status/1308802056367616002)
I just give you a simple hint: You wont find working solution of how extract "zillions of dollaz" on github.
Just ask yourself a simple qustion - would you sell such a killer. Silver bullet. Golden key to any ATM for $2k?
PS. Few days ago he was selling other "tool" for 10k until someone accused him of infecting other people.
I've got no other questions. Continue drive old Lexus.
Unfortunately this forum became a shithole without proper moderating.
02-21-2025, 09:52 PM
Linear Mode
