ISTEALER LOGS
Hey there, this is going to be a short but simple guide on what you can actually do with the password logs that get sent to your ftp server when using password stealing trojans such as iStealer. For the reason of this guide I am using parts of Casi’s Password Dump, which can be found in the dark members section of the forum. To unlock the dark members section you must achieve 100 posts with no spamming, and be an active member of CyberXtreme. A preview of the dark section can be viewed here. Okay so lets have a look at the log:
Program Protocol / Url Username Password
![HOW TO USE YOUR ISTEALER LOGS [BEGINNER FRIENDLY] 2022](https://i.ytimg.com/vi/w05Oyo-VDaM/hqdefault.jpg)
ALL FIREFOX 3
- ACCUTANE : Compare => Choose => Buy csavino3 weiland
- https://www.vanns.com [email protected] 7GPnKdzP
- Firefox 3 https://accounts.craigslist.org [email protected] weiland
- https://www.fandango.com [email protected] weiland
- Firefox 3 http://signin.ebay.com clakey3 kitty0
- Download music, movies, games, software! The Pirate Bay – The world’s most resilient BitTorrent site BugMeNot666 BugMeNot666
- Target.com – Furniture, Patio Furniture, Baby, Swimwear, Toys and more [email protected] weiland
- DSL · Cable · VOIP · Security · Satellite · Fiber · News · Tips · Reviews · Community · Tools – dslreports.com csavino3 weiland
- Your Company Name csavino3 weiland
- https://wellsccn.fnfismd.com [email protected] weiland1
- https://www.linkedin.com [email protected] weiland
- – myspace.com/mail [email protected] weiland
- AnandTech Forums – Powered by vBulletin csavino3 weiland
- YouTube – Broadcast Yourself. csavino3 weiland
- https://www.netflix.com [email protected] weiland
- TVShowsOnDVD.com [email protected] wiseman
- http://forums.ifilm.com csavino3 weiland
- https://webmail.atl.earthlink.net [email protected] weiland
- https://controlpanel.newshosting.com csavino3 weiland
- https://store.apple.com [email protected] weiland
- http://www.unitrindirect.com 1267777 WEILAND
- http://mypw.freeforums.org csavino3 csavino3
- https://secure.fitnessmagazine.com [email protected] carlo1
- https://www.bedbathandbeyond.com [email protected] weiland
- Home | goonmap Polluxx Troy weiland
- https://myaccount.earthlink.net [email protected] weiland
- http://www.paypal.com [email protected] kitty000
- ngindex.com : The alt.binaries newsgroup/usenet search engine truthpro trhjth
- https://www.amazon.com [email protected] carlo1
- Firefox 3 Torrentspy csavino3 weiland
- http://whammy.us csavino3 weiland
- https://www.myaccount.cingular.com 3460 weiland
- Firefox 3 https://www.txgas.com 9.10E+17 2746
- https://qspace.iplace.com csavino3 weiland
- https://secure.eluxury.com [email protected] weiland
- https://www.google.com csavino3 weiland1
- http://www.news.earthlink.net [email protected] weiland
- Netflix: Rent as many movies as you want for only $8.99 a month! Free Trial [email protected] weiland
- ONEOK 910058593134788427 2746
- Log in Polluxx Troy WEILAND1
- SIRIUS Satellite Radio – Everything worth listening to is now on SIRIUS [email protected] pan15837
- https://secure.www.oldnavy.com [email protected] weiland
- https://www.wireless.att.com 5124975101 carlo1
- https://www.myfico.com [email protected] weiland1
- https://www.redchairstore.com [email protected] weiland1
- Invitations, Free eCards and Party Planning Ideas from Evite [email protected] weiland
- https://www.creditexpert.com csavino3 PVQDEETH
- http://ssl2.papajohnsonline.com [email protected] weiland
- EarthLink – News [email protected] weiland
- Home | goonmap Polluxx Troy weiland
- http://www.myepisodes.com csavino3 weiland
- NZBMatrix: NZB Usenet Newsgroups Search Index : NZBs csavino3 weiland
- Dell – Rebate and Coupon Care Center carlosavino tumbleweed
- http://pcloser.independencetitle.com Savin SavB26765 http://www.papajohns.com [email protected] weiland
- https://online.wellsfargo.com 9391
- Shop Sirius Satellite Radio csavino3 weiland
- Firefox 3 https://www.statesman.com [email protected] dwandwan
- Firefox 3 homebrewhowto.com csavino3 weiland
- Wikipedia, the free encyclopedia csavino3 weiland
- Ninan is not a news reader : Ninan csavino3 weiland
- GEICO | GEICO Car Insurance. Get online auto insurance quotes and save today. Free motorcycle quotes as well. 2006481770 weiland
- EBSCOhost – world’s foremost premium research database service mtlib_5_892 discovery
- SternFanNetwork – Powered by vBulletin csavino3 weiland
- Sallie Mae: Private Student Loans, Federal Student Loans, Private College Loans csavino3 weiland1
- https://www.skymall.com [email protected] weiland
- Online Coupons | Deals from DealTaker.com Buggers50 fifty
- Firefox 3 YouTube – Broadcast Yourself. csavino3 weiland
- iLounge Forums csavino3 weiland
- Firefox 3 https://my.autotrader.com [email protected] weiland
- LinkedIn | Relationships Matter [email protected] weiland
- Firefox 3 http://www.epcgaming.com csavino3 weiland
- Hydrogenaudio Forums – Portal csavino3 weiland
- Firefox 3 Smartphone Forum: PinStack.com – Best Smartphones, Apps, Reviews csavino3 csavino3
- https://www.graduateconnections.com csavino3 weiland
- Firefox 3 https://secure.homedepot.com [email protected] weiland
- Xbox 360 Hacks – Hacks, Cracks, Mods, Homebrew, Utilities. csavino3 csavino3
- Firefox 3 http://bitznpieces-games.com csavino3 weiland1Firefox 3 https://www.kennethcole.com [email protected] weiland
- Nissan 350Z Forum : 350Z / 370Z Tech Forums csavino3 weiland
- Firefox 3 http://www.msxsecurity.com csavino3 weiland
- Welcome to Anthropologie*-*Anthropologie.com [email protected] weiland
- Firefox 3 The Internet Movie Database (IMDb) [email protected] weiland
- Serials 2005 – Powered by vBulletin Populus_5 bugmenot
- Ford Explorer (console) adac320n adac320n8
- Firefox 3 I Prefer [email protected] weiland
- Scenyx Entertainment Community (Powered by Invision Power Board) csavino3 weiland
- Firefox 3 https://www.etsy.com csavino3 csavino3
- https://workcenter.s…probusiness.com carolyn_savino Romanfever1!
- Firefox 3 https://www.paypal.com [email protected] kitty000
- XBMC csavino3 53905568
- Firefox 3 Coupons, Deals, and Cash Back Shopping – FatWallet.com PolluxxTroy weiland
- NCAA Football 11 Rosters | NCAA 2011 Rosters | PS3 – Xbox 360 – PS2 nobugs nobugs
- Firefox 3 https://secure.bhg.com [email protected] eatcake
- https://secure.buy.com [email protected] weiland
- Firefox 3 https://membership.dell.com [email protected] weiland1
- http://www.vidilife.com bugmenot bugmenot
- Firefox 3 Joystiq [Xbox] [email protected] weiland
- http://goon-toons.com csavino3 weiland
- Firefox 3 AVS Forum csavino3 weiland
- HowardForums: Your Mobile Phone Community & Resource csavino3 weiland
- Firefox 3 Airline Tickets and Airline Reservations from American Airlines | AA.com T945T80 weiland
- Stickam – The Live Community, Live Streaming Video [email protected] weiland
- Firefox 3 Mister Car Wash csavino3 weiland
STEPS
Okay it is fairly self-explanatory, the first words is the program the passwords were stolen from. Second word is the website. Third word os the username. Fourth word is the password. What we look for in the logs is for any websites where you buy things. You should login and see if any payment details are saved or credit details or paypal. Most the time you won’t find anything that way, but in my opinion it is always worth a shot. The thing you really look for though is two things.
1) Look for an ebay signin
2) Check if all their passwords are the same, or if there is a password that is used more than others.
With that in mind, we search the above log and find: || Firefox 3 || http://signin.ebay.com || clakey3 || kitty0 || Now the next step is to sign into the ebay account, but hold on! Use your brains! Probably not a good idea to sign into someone elses ebay account that you have stolen with your IP address. You should ALWAYS USE A PROXY without fail! There is a good program which can be found here which will hide your IP address and give you safety
. So now lets sign in. Follow these instructions:
1) Signin to the ebay account. (check your proxy is working
Code:
http://www.tracemyip.org/
2) Buy any item. (literally just pick the first item you see and select buy now)
3) Click pay now. (this will redirect you and ask you to sign in with paypal, and they fill in the email address bit for you)
This bit is what we need. His paypal email. Which ebay very kindly gives us. Now go to the paypal website. This is where a bit of common sense and trial and error comes in. Paypal passwords require more than seven letters and at least one number I think. So we now have to take a look at the password log and pick out a few potential passwords as his paypal password.
I made this list and placed them in order of what I think would be most likely his password:
– weiland1
– kitty0
– kitty000
– csavino3
So now we would try the passwords and see which one would work. Hopefully we have guessed right and it will sign in to his account. From there most of it is obvious. I would have a new paypal account prepared, with no bank details or credit card details entered. Then I would send some money to my new paypal account. Now buy something and have it sent to your school or something like that under a name that isn’t yours, but let the school know that they will get some post and it is for you, but under Michael Jeremy Dudemeister or something like that. Then it will be very hard to get traced back to you. Be imaginative there are other ways. That is all.
This ISTEALER LOGS information should only be used for educational purposes and I hold no responsibility for what any person/s do with the information.
Henceforth, WE WISH TO ANNOUNCE THAT OUR SERVICES ARE NOT AVAILABLE TO PEOPLE FROM NIGERIA AND INDIA. THESE ARE USELESS TIME WASTERS AND THIEVES TRYING TO BEG OR SCAM US OF OUR PRODUCTS. OUR SERVICES ARE NOT FREE AND PAYMENT IS UPFRONT
A LOT OF FOOLS FROM NIGERIA AND INDIA. on the off chance that YOU DON’T TRUST TO USE OUR SERVICES, DON’T CONTACT US AS WE HAVE NO FREE SERVICE
WE DO NOT RESPOND TO TIME WASTERS, COME READY TO BUY. KINDLY CONTACT US VIA THE LINKS BELOW:
EMAIL: [email protected] Click Here
ICQ: @MTH2021 Click HERE
WHATSAPP: +19789070788 Click HERE
TELEGRAM: @MTH2021 Click HERE