How to reverse the connection on scammers :)

General Tutorials
1

you would have the scammer connect to your VM, then take the code of the scammer and connect to it on your main conputer, then tell the scammer waiting for other party, or somthing like that, when they hit accept go to the VM they are connecting to and hit accept, then download, and transfer the files needed. After that happy scambaiting :slight_smile:

7 Likes
2

So, in this situation, is that all tat needs to be done on the host?

3

You really shouldn’t use your main computer. Use a second VM if you are going to attempt this.

7 Likes
4

that is a good idea. :slight_smile: thank you for sharing

1 Like
5

agreed, I wouldn’t let these guys possibly see, realize, or worst case touch metal.

6

So your clear and I understand in this for instance… Clone a Widows VM let him conect to one and then pull something like the old " it popped up but now its gone" then send him an invite with escalated privs … Cuz he thinks we’re ‘stupid’ he accepts because he thinks he is in control ? That part was slightly vague , thanks.

7

I would actually need his device to be the remote device to be able to mess up with his saved files. how could i do that, he needs to accept the connection request.

when i would be messing with his files ie copying and deleting them wouldn’t they be visible from his side while he is actually on the other V.M

if there are some settings i should do could you kindly send me a screenshot on how the settings should be for messing with his system for me not to be noticed.

8

thanks for the info. have a couple of new questions.

does your system work just on anydesk.
what program do you suggest me install to be able to do the calls.

I am from Malta so i do not have a USA number.

cheers

9

Im not new to hacking or security, but new to scambaiting…

the idea i had in my head for approach wasnt necessarily reversing anydex.

I was thinking more like merge every fucking file on the entire VM machine with a payload, so when the idiots start taking juicy looking files… like any other juicy bait trojan file.

i mean it can be anything from ajuicy “bank info” pdf, to nudes, to images of “my” id card

is that an explored avenue, or is everyone just reversing anydex?

1 Like
10

my PC is to slow for a vm so what can i do?

11

The biggest problem for VMs is just not enough memory. A 10 year old computer with 16GB can run VMWare ok. Or get an old laptop and just run it as a dedicated bait machine. (Just keep all your personal info off of it.)