RAT

freedom_fighting321

That's because he can't control it! He's the RAT! BTC is the poison!

CryptoCrackLord

That’s true for sure. I just mean I don’t see many ways someone would’ve gotten through his 2FA without an exploit, or via social engineering for that matter. Unless his machine has a full on RAT or something. Especially since he mentioned he added a passkey and everything which requires another 2FA with. Sounds crazy. So indeed either a virus or social engineering.

CrazyAppel

140+ comments and not one person mentioning a botnet/RAT with HVNC or reverse socks5 lol. Assuming you use Windows, download Autoruns64 from Microsoft site and check if your startup items include anything suspicious that you don't immediately recognize.

Swanspeed308

Ray Trapani should start a new company coaching criminals how to turn states evidence to Federal and State prosecutors he could call it RAT INC.

redditkid

Maybe after his death people gonna realize that he literally called "Banks" RAT as this poison gonna kill them.

kekzilla59

Thank you for your kind words! We definitely appreciate the support. Our efforts are focused in providing quality products and services for the RAT community.

kekzilla59

As u/RollingSkull0 pointed out, Reddit already got their money. RCAX is a project built by the RAT community, for the RAT community. The benefit stays with the holders as well as the artists. One example, RCAX will enforce artist royalties on the marketplace but the artist will have the ability to adjust the royalty to their liking. If they want to reduce or eliminate the royalty to benefit secondary shoppers than they are more than welcome to do so. "Burning" the asset simply allows the holder more freedom to do with what is rightfully theirs. It would provide a liquid asset that they can use to buy an Avatar they would prefer to have or simply hodl the RCAX token. Key here is having more options available to you.

PurpleFlamingoFarmer

True, just need everyone to know who might click this he's a RAT

C01n_sh1LL

> Where are you getting information that they sit on crypto wallets for years? I never said that. That's a strawman argument. You're not really following me because your thinking is a bit simplistic. The asset in this case, isn't necessarily OP's wallet. Imagine a scenario where OP experienced an OS-level compromise a year ago, and has had a RAT or similar, with keylogging, screenshotting, etc capabilities, something in the Zeus/Citadel family or a copycat for example. Now imagine somebody checked out OP's system, decided it wasn't very interesting, and put it on the back burner for months. Then one day they check, and OP has metamask installed and is handling private key seed phrases on the machine. OP sets up an empty wallet before transferring funds in. The intruder now has the private key to that wallet. They *then* put a sweeper on it. Does this still sound unrealistic or unreasonable to you?

FireFoxInSocks

1. I lost 10,000 ETH a few years ago. It turined out I had downloaded a RAT buy accident :( 2. Are you using windows? 3. *I’m not very practical with on chain analysis....* 4. *I got my ETH drained from Metamask...* 5. LOLOLO.

whitak3r

Sounds like it's your typical 'click this link to install needed update'. Could be browser corruption or RAT, maybe this way is less apt to be picked up by AV?

tambaybtc

Alert! Malicious NuGet packages impersonating popular cryptocurrency projects and platforms have infected developers with the SeroXen remote access trojan. The packages, uploaded by a user named 'Disti', mimic crypto wallets, exchanges, and Discord libraries and have over 2 million downloads. The packages contain an obfuscated batch file that carries out malicious activities on the compromised system. The trojan is marketed as a legitimate program and is sold for $15/month or a one-time purchase of $60. SeroXen RAT is gaining popularity among cybercriminals due to its low detection rates and powerful capabilities.

Maleficent_Sound_919

>Malicious Solana, Kucoin packages infect NuGet devs with SeroXen RAT Am I the only one who has no clue what this means

coinfeeds-bot

tldr; Malicious NuGet packages impersonating popular cryptocurrency projects and platforms have infected developers with the SeroXen remote access trojan. The packages, uploaded by a user named 'Disti', mimic crypto wallets, exchanges, and Discord libraries and have over 2 million downloads. The packages contain an obfuscated batch file that carries out malicious activities on the compromised system. The trojan is marketed as a legitimate program and is sold for $15/month or a one-time purchase of $60. SeroXen RAT is gaining popularity among cybercriminals due to its low detection rates and powerful capabilities. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR.

coinfeeds-bot

tldr; The developers of WinRAR have fixed a zero-day vulnerability that allowed hackers to install malware on victims' computers, giving them access to their crypto and stock trading accounts. The vulnerability was exploited for four months, during which hackers were able to create malicious RAR and ZIP archives that appeared harmless. These archives were distributed on trading forums, infecting at least 130 devices. The malware strains included DarkMe, GuLoader, and Remcos RAT, which provided the attackers with remote access to the infected computers. WinRAR patched the vulnerability in version 6.23. *This summary is auto generated by a bot and not meant to replace reading the original article. As always, DYOR. Try our free crypto chatbot at https://chat.coinfeeds.io*

Sugarbird676

Their token should be called RAT

Unlikely_Nothing6132

I got that email and didn’t want my contacts to see my micro penis so I paid… Hello I know your password! I infected you with a malware (RAT)/(Remote Administration Tool), some time ago and since then, I have been observing your actions. The malware gave me full access and control over your system, meaning, I can see everything on your screen, turn on your camera or microphone and you won't even notice about it, yes such things exist, you can Google it! I have also access to all your contacts, I collected everything private from you, pictures, videos, everything! And I MADE A VIDEO SHOWING BOTH YOU (through your webcam) AND THE VIDEO YOU WERE WATCHING (on the screen) WHILE SATISFYING YOURSELF! I can send this video to all your contacts (email, social network) and publish all your private stuff everywhere! You can prevent me from doing this! To stop me, transfer exactly: 400$ with the current bitcoin (BTC) price to my bitcoin address. If you don't know how to get bitcoin, Google - "How to buy Bitcoin", it's very simple for example with credit card. The wallet you can create here: https://www.blockchain.com My bitcoin address is: 13zk33SCAt5KGrMSR1ktL4Tkow4sVck4Qg Copy and paste my address - it's (CASE-sensitive). You know this all isn't a joke, you got the proof above! I think it's a very good price compared to the damage and hell it can bring into your life! After receiving the payment, I will delete everything from you and you can live your life in peace like before. I give you 3 days to get the bitcoins! Don't share this email with anyone, this should stay our little secret!

4ucklehead

Also I love how it's a mix of a bunch of things.. First it's I know your password and then it's I installed a RAT when knowing your password wouldn't allow you to install a RAT I wonder how many emails he had to send to get like one payment... The vast majority of people are gonna ignore this

akiletour1

RAT is Remote Access Trojan they couldnt even get that right haha

outcast_Mugen

I just didn't like the RAT (remote admin tool) part .. i try to be private in my dealings haha

copyright1968

Life Tip # 714: Always destroy the evidence ​ I got a similar email: `Hello` `I know your password!` `I infected you with a malware (RAT)/(Remote Administration Tool), some time ago and since then, I have been observing your actions. The malware gave me full access and control over your system, meaning, I can see everything on your screen, turn on your camera or microphone and you won't even notice about it, yes such things exist, you can Google it!` `I have also access to all your contacts, I collected everything private from you, pictures, videos, everything!` `And I MADE A VIDEO SHOWING BOTH YOU (through your webcam) AND THE VIDEO YOU WERE WATCHING (on the screen) WHILE SATISFYING YOURSELF!` `I can send this video to all your contacts (email, social network) and publish all your private stuff everywhere!` `You can prevent me from doing this!` `To stop me, transfer exactly: 400$ with the current bitcoin (BTC) price to my bitcoin address.` `If you don't know how to get bitcoin, Google - "How to buy Bitcoin", it's very simple for example with credit card. The wallet you can create here: https://www.blockchain.com` `My bitcoin address is: 1MRpTZstLEw4mGDziVYY3F6sAsz9tcgVT3` `Copy and paste my address - it's (CASE-sensitive).` `You know this all isn't a joke, you got the proof above!` `I think it's a very good price compared to the damage and hell it can bring into your life!` `After receiving the payment, I will delete everything from you and you can life your live in peace like before. I give you 3 days to get the bitcoins!` `Don't share this email with anyone, this should stay our little secret!`

chance_waters

RAT, all my other exchanges were secured via withdrawal 2FA

Isabela_Grace

I got in trouble with the law back in 2010 so my knowledge is dating but back in the day it was easiest with a RAT. I’m sure if I was designing a virus specifically for this I would change the host of the IP they contact to my own then forward the data along a second time so it looks like it’s coming from them still.

Soyweiser

I don't know if there is a RAT on your phone, but non-unique passwords is prob how they got in. And then some other hack, social engineering (or an/combined with exploitable flaw at the cryptoexchange end) are way more likely than some sort RAT attack which stole data from your phone, esp as (last I heard about this was several months ago however) getting around 2fa with various tricks is not totally unheard of. (2fa, esp google authenticator is still super safe btw. Switching to text based 2fa or turning it off is def a mistake, and going the ... I think it is called Yubikey way, where you have a physical digital key on your person, is a bit overkill for personal stuff like this (and prob also isnt' supported that well, I have no idea, I just know it exists)). And I don't know how you would get it figured out, I don't think you can tbh, esp not as a 'noob' so to say. Virusscanners etc should catch it. The likelyhood you have an undetectable piece of malware which only targets you and not a lot more people is very unlikely. Just reinstall everything, keep everything patched, get unique passwords everywhere (and a password manager) and do a police report. Perhaps start with the last one as you have been robbed and depending on where you live they might do something with it. And if your work has a good security team, might also want to mention your crypto got hacked just so if I was wrong (which is likely of course, im just a redditor who learned a bit about digital security a long while back) they can see if they have noticed anything. (Only applies if you work for a big company of course). Sadly, there simply isn't much you can do, you got robbed, figuring out exactly how (which you might not even be able to do and will take untold hours, and a further toll on your MH) you got robbed doesn't change the fact, nor will it get your shit back. This sort of thing, compared to the traditional banking system where stuff is (up to a point, but you didn't reach that point I think) insured and you get your money back, a big flaw of the whole cryptocurrencies ecosystem. And that is why im a skeptic in all this.

daddyneedsanewlife

My wife makes candles for a living and my work is even less exciting so I don't think it's anything like that. I don't think there's anything that would make me a target in any particular way. Unfortunately I did not use completely unique passwords, which going forward I will be doing. You seem pretty knowledgeable so I have to ask- if there's some kind of RAT on my phone and it's not being detected by Malwarebytes or Norton, how would I go about finding the threat? I see there are phone forensic services but this just screams "come get scammed even more"- is there any type of legitimate service that does this type of thing? This stuff is a little above my skill set... Thanks for your insight

Soyweiser

Sorry, the cable sounds like a massive red herring (unless the actual target was one of the companies you/your wife works for, but they would never do something as stupid as drain your wallets and give away they are trying to infiltrate that). Some databreach (the samsung one happened) -> password spraying (you didn't mention you use unique passwords everywhere)-> hack to bypass 2fa ([yes, this is possible](https://therecord.media/hackers-bypass-coinbase-2fa-to-steal-customer-funds/), hack or insiders) is way more likely than somebody sending you 200 dollars in gear which has a high risk of failure. This or a phishing attack or a RAT or just something else. Don't devolve into security paranoia, like high tech cables or super duper browser hacks and . It probably is something way simpler. The cable doesn't even work how you fear it does. (the keylogger feature is for when the cable is used between a keyboard and a computer for example (and it also is a feature which is in development only for the elite limited edition tier. You prob are not being targeted this way, esp as these elite cables were only available at defcon a few weeks ago).

pfcypress

Either someone in the comfort if your home took your coins or your phone (android?) had been compromised with a RAT.

Spartan3123

It could have been an online attack from your PC after you logged in, they could have stolen your session cookie and done stuff to your account in the background. You need to identify when the hack happened, need to see logins and withdrawal dates with IP to make sure it's not too yours. If they are you were compromised by a RAT on your device. Even with 2FA they just need to wait until you log in. Kraken has different 2FA for withdrawal and login, which is much better.

schepke

Lol when I hear somethins claims to be 100% safe or something, it's always a red flag. Think of going to the market and buying noodles which says "100% RAT POISON FREE" on the box. Yeah I'm not eating that.

Alpha3K

You would be surprised what type of BS even experienced people fall for. Had someone quite recently getting their PC RAT'ed because they ran a game from "someone they knew" on Discord. Well, someone they knew on Discord was hacked with the exact same thing they fell for after. So, lesson being, even if someone you trust sends you something that might be suspicious and out of context.. it might still be it's not safe.

5kp0phyru7e

You know, just the regular porn download of a 3 day old torrent including and-for-some-reason-opening a 700mb screensaver file containing a RAT on the same computer where your crypto is stored.

gimmethewifipassword

Yeah dude. I myself did this shit to friends in the 90s lol hey man open this siiick game I sent you just double click it ;) I'd have a RAT and be able to open their CD drive and other stupid shit.. but yeah that was fuckin 15+ years ago. SMH

Suavepebble

Anyone who thinks Shkreli isn't in on this is out of their minds. The guy is out of jail for like a week and is connected to the theft of hundreds of thousands of dollars. Here is how this goes: Shkreli has an accomplice upload a RAT-infested torrent. Shkreli downloads and runs the RAT. RAT steals the money. Shkreli splits the money with accomplice. Shkreli then claims culpable deniability and hopes that the porno aspect of the torrent is embarrassing enough to make people think he wouldn't proactively humiliate himself for free money (which is obviously not true). Case closed.

Savings_Inflation_77

Twitter should change its logo to a RAT.

r2pleasent

In regards to IP address, you could just claim your system was compromised, no? Someone RAT onto your device and placed fraudulent orders. IP address has very little impact on fraud case outcomes.

UltraHyperDonkeyDick

Yeah, I know a bit about RATs. I know what to look for in this respect, and typically a user with access is required to install / deploy these. I feel like this is something I would know I had done. Since I am the only user of my sensitive devices, this seems unlikely. The post I was replying to didn't mention how their desktop was compromised. But they did mention it was being "shadowed". Are you saying they were probably coerced in someway to installing a RAT or is there some other method that used to gain remote access. Or is as simple as they installed TeamViewer and someone gained access to their host? My worry is that I don't know what I dont know. If there is some other way someone could gain access to my machine outside of the obvious, this is probably what will get me if the worst was to happen. Cheers for elaborating.

ABoutDeSouffle

Those things are called RAT, remote access tools. If the firewall is on your computer, it's beyond useless, just saying.

BangkokPadang

Text all your friends and warn them that If they don’t help you come up with enough BTC they’re gonna end up getting a video of you jerking off sent right to their phone, and NOBODY wants that, them as much as you. But for real “clone ur contact list from ur electronic address” doesn’t actually mean anything. It’s a generic phrase that conveniently encompasses a computer, a laptop, an iPhone, an android phone, a tablet, an iPad, etc. to cover all their bases. If it was real there’d be a clip or a screen grab of the video they supposedly have in the message to let you know they’re for real. If this had actually happened to even a single person, there would be articles about it all over Engadget and Gizmodo. Just ignore it. EDIT: I know like 10 years ago generic webcam hardware all used the same internals and you could literally use google to find direct access to random webcams, and it is possible to install “RAT” software that would give someone remote access to your webcam on a computer, but that still wouldn’t give them access to your contacts, and certainly not to the camera on a current iPhone or android phone.

chance_waters

Very sorry for your loss here, I hope that this isn't financially crippling for you. I had a now fairly life changing amount of BTC stolen from Coinjar via a RAT attack in 2017 so I know the feeling very well, at that time the exchange didn't even offer 2FA. the benefit of that was I drastically increased my digital security moving forward, sometimes bad stuff needs to happen for us to do that. I keep very few funds on exchange and don't store any seed phrase information digitally. It is insanely important to have cryptographically based 2FA or ideally 3FA for all exchange accounts with a material amount of wealth, as well as ANY account which might provide access to those accounts. That includes emails etc. everything needs to have 2FA and ideally your exchanges you want 3FA involved, as an example to get funds off my binance to a non whitelisted wallet I need to have both my password (only inside a password manager with 2FA) my email (different password, 2FA) and 2FA for the exchange itself. If you use something like Google as your general password manager then have that biometrically or pinlocked for password review, and go through the security checklist regularly. Things like lastpass will inform you if there's been any darkweb data breaches with your plaintext passwords, but you should only be using password manager generated password which can't be brute forced, you can also pair password managers with a pin or biometrics incase of RAT. The only way to steal my cryptocurrency from exchanges would be to have physical access to my phone alongside my phone pin, and the bulk of my funds are in cold storage where you can't get in without a pin which is exclusive to that device and not written or recorded anywhere, the device itself is also kept privately. This stuff can be frustrating if you happen to lose your phone but there are secure processes to regain access to exchanges if the worst happens and you also can't restore your 2FA.

IAMM4RTY

Also don’t forget to add some sort of RAT into the mail and rename it “proof”.

Sixhaunt

>so you're telling me that a hacker applied the most sophisticated and powerful virus you overestimate the hacker. it doesnt need to be anything remotely close to the most sophisticated and powerful virus. It's just a run of the mill RAT (remote access trojan). Why would OP notice the metamask pop-up if they are in the kitchen, sleeping, watching tv, or any other activity that they could be doing while the hacker in on their system? OP probably didn't manually sign back out of metamask on their computer after each transaction. It stays logged in for a long time otherwise. Same thing with the CEX, even if you close the tab you can reopen it and still be logged in. I have to admit it's a little worrying that you have such an unshakable and unreasonable faith in the security systems on your computer that are broken into or fail constantly. You will almost certainly end up like OP with that mindset

Accidental___martyr

Nobody should be a RAT.

tek3k

That's what I thought. May have a RAT and/or keylogger

cryptoboosie

Currently it’s behaving like RAT POISON. Not just Bitcoin, it’s all crypto! Tell that to the teacher, before all students goes broke!!

WikiMobileLinkBot

Desktop version of /u/_-RAT's link: <https://en.wikipedia.org/wiki/Post-it_Note> --- ^([)[^(opt out)](https://reddit.com/message/compose?to=WikiMobileLinkBot&message=OptOut&subject=OptOut)^(]) ^(Beep Boop. Downvote to delete)

endless

I once dumped over 100 million usernames and passwords from a massive Internet-brand-familiar website. Another time my uh, colleagues, tricked a police officer into downloading what he thought were nudes of a teenage girl, but it was actually a RAT. This resulted in the famed 2004 [LexisNexis breach](https://www.washingtonpost.com/archive/business/2006/07/01/five-arrested-in-theft-of-lexisnexis-data/e4ef8ed6-e809-430d-8114-5e46dccbc50a/) wherein hackers started pulling their enemies' entire family trees full information incl. social security numbers. I went to the light side due to a loss of interest in blackhatting and because I didn't want to rub the FBI the wrong way.

CryptoCrackLord

It’s possible but highly unlikely. Also it depends on what you’re storing. It’s a complicated question to answer. If you mean text files, music files, photos, simple files like that, then probably not. More complex file formats that have embedded content in the software you open them with could be a bit more dangerous. A virus could inject itself into the file, or take advantage of dodgy file formats for software that has exploits in it to reinstall itself once the file is opened with the software that has an exploit. I would wager this is very uncommon though and would be a very serious virus. Most viruses are just your common RAT and won’t be attempting additional extreme stuff like this.

Onelinersandblues

It’a the Simpsons episode with the glam bands “it says here we’re RAT”

brian-augustin

Exactly. 100%. I loved his energy and hype during the rise, but I held a little longer than him. Still was green. Just a shady af RAT.

plague_rattt

Better than a SAIDS_RAT

BTCDEX

And never download sth from those sites. For all you know they install a browser extension or a RAT trojan

debanked

This is definitely a dead cat bounce RAT test

gronx050

Good idea man, get it going and bring us a RAT coin!

cryptoboosie

The RAT poisoning is happening. The OG knew what they were talking about. But you know what? You got the jab so you should be resistant to this …right?…right? LOL

HiFidelityCastro

Yeah my missus PCR test just came back positive (those RAT one’s are hopeless, consistent false negatives), we’ve been sick/isolating for a few days, so I suspect that’ll be me too. To be honest it’s been very mild (for reference I’m a bit old, probably ancient compared to most here, but no co-morbidities).

fallenkeith2018

Do you have your seed phrases listed somewhere on your PC like in a text file or CSV? Also if you have any other wallets on your PC, someone could maybe get to them with a RAT if there's no protection or encryption

Ghost_carapace_0

So there are things known as RATs remote access trojans. Also, there are entire virus kits. The primary virus software delivers the RAT. Then, the hacker can access the pc at his leisure, even if the main virus was deleted.

Altruistic_Box4462

Sounds like a remote administration tool (RAT). It pretty much gives the attacker full access to your PC, pretty much like having team viewer open 24/7 without your consent. Were you watching your PC screen at the same time your wallet got drained?

OwenMichael312

RAT tool

artefactuul

BRB buying some Ratcoin (RAT) rn

chronixos

Lol what a question. Well depends what you understand under viruses. In general yes. More bad are RAT malware

Breaker2195

Brave has BAT, reddit needs a RAT.

RStyleV8

Falling for HACK LINKS does mean you got hacked wtf lol. No it's not a scam if you download a RAT that's literally hacking.

bungleback_cumberbun

This doesn’t sound like any attack i’ve heard of in the pen testing field. People are much more likely to click a malicious link and get a zeus variant all up on their network, than to be hacked live in person within their LAN. Its possible though. What do you mean “cloned” the phone? A sim swap? a RAT? One can clone the MAC but not the cellular network, unless they have a cell tower. Heartbleed was disclosed publicly in like 2014. To attack the wifi router they would have to be within the lan network. If they proceeded to exploit the printnightmare vulnerability, they likely used it to install an appropriate zeus variant on each device. You need to change your passwords on all new gear, and never mix new with old once infected. It’s like raw and cooked meat, you keep them apart, always. Never out raw chicken on your cooked nuggets. If you change passwords on your infected shit, any attacker would have the new password.

nebula21399

NYC had the opportunity to name their token $RAT

nebula21399

NYC had the opportunity to name their token $RAT

xdchan

Send them RAT(remote access trojan) encoded into text file or something pretending like you just gave them your seed phrase of something like that. Drain their wallets. Also be careful, use chain of proxies and virtual machine in virtual machine to connect to your RAT because it's highly illegal and scammer may sue you.

Small-Dig8935

RAT coin developers are into creating fractionalized NFT of real world paintings and art, they have already got their hands on a banksy.

Ekksde

Sounds like you have a RAT (remote administration tool) on your PC looks like it’s a crypto stealer so you’re kinda lucky they didn’t take anything else

furrina

We really need a ratcoin! maybe symbol TAIL? or just RAT? SQUEAK? i'm serious. Somebody make one. Rats can do cool stuff like chew through cement. Tons of uses. 🐀🚀

SwoopingPlover

Got me thinking. Not sure about tickers, but I do remember watching a documentary with a french scientist that pronounced laboratory "lab-oh-RAT-or-ee" and have done the same ever since.