I learned more about programming and cybersecurity in a few months than I would later in 4 years of college
I remember talking with the American author of NanoCore RAT and the Romanian author of CyberSeal crypter about their businesses
I had purchased NanoCore RAT, it was $25 for a lifetime license, and CyberSeal crypter, $79 lifetime IIRC
When used together, you could build RAT for Windows PCs which was Fully UnDetectable by antivirus programs (FUD)
I bought NanoCore RAT when it still had a "Surveillance" plugin which included keylogging, audio, and webcam features
That was later removed, I think Aeonhack (author) was worried about it getting him into legal trouble
I had a few support questions about how to use the software, in particular the CyberSeal crypter was fairly complicated, the authors were very responsive
The CyberSeal author even provided livechat support
In the chats I learned more about the people behind the software
Something they had in common was that they were from humble backgrounds, they had used their talents to create niche products, market, sell, and support them
They had built reputations as being trustworthy and helpful
The money they were making was life changing for them
Obviously, I would say, they knew that their products were primarily being used by criminals, but they always marketed it such that their software was only intended for legitimate use...
As you probably could have guessed, the story didn't end well for them
Three years later, 26 year old Aeonhack's door was kicked in by the FBI
He was sentenced to 33 months in prison for aiding and abetting computer intrusions
Similarly, 6 years later, the author of CyberSeal was arrested in Romania
Something that always stuck with me over the years -
It's really the same amount of work to create a criminal business as it is to create a legitimate business... finding a problem, building a product to solve it, creating a brand, reputation, marketing, selling, supporting it
It's not worth it
It's such a bummer to see smart people wasting their talents in the underworld
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Something that I'd like to hack on if I get some time: is there any way we can create an exploit inside of a .unf file? Social engineering required to get someone to restore from it, but once restored, RCE. github.com/zhangyoufu/uni…
Here's the short-term vs. long-term marketing strategies in the article above which we're using today (at 1,082 subscribers)
I put a 🤔 next to things I used to do personally until I hired. Now we both do them manually. Not sure if that counts as short or long-term strategy?
You can see the only long-term plan listed there that we're using is SEO... and by SEO I mean we're in such a small niche that we landed top result for most related search terms ~6months after launching and have held it since, without any effort on our part like blogging
I've been a hobbyist programmer for 5 years and now I'm trying to transition to become more of a professional.
That means I have to learn how to work with a team of developers instead of solo, use OOP (properly), lint, and unit test. All things I've never done before.
He looked at my code, told me I'm on the right track with my classes and structure, recommended how I can add linting to it, and suggested a few books to read.
We're going to meet again in a few weeks once I've got linting down and talk more about unit testing, and how to work as part of a team in git.
Here's what I think after serving 2,000 free plan users on @hostifi_net...
No.
Some reasons why...
1. Lack of commitment to finish onboarding. If the user paid to start with, they'd be more likely to invest the time into onboarding. If they onboard successfully, they don't churn.