MPGHThe Dark Arts
RegisterLog in

Kiddies keylogging ROTMG users

Posts 1–15 of 54 · Page 1 of 4
Kiddies keylogging ROTMG users
I have a hobby : i am reversing keyloggers found on the internet to own kiddies.

This is funny because i found a "Special Client.exe" which was intended to be a 15.0 hacked client.

>rotmg client
>exe not signed by adobe
>LMFAO

Of course, its a dropper that execute a real 15.0 hacked swf and... install an ardamax keylogger on the computer..
Quickly bruteforced the xor on the config file => recovered the "hackers" credentials..

I was exploring many logs he received, and i saw some skype conversations like this one :

Show messages from: Yesterday 7 days
[6/29/2013 5:00:13 PM] jordan stylianou: did u get an account yet?
[6:42:15 PM] MPGH Vortex: Yeah
[6:42:26 PM] MPGH Vortex: You want a new build of my hack client I am making?
[6:42:31 PM] MPGH Vortex: MPGH Vortex sent build1.6.exe
[6:42:35 PM] jordan stylianou: whats in it?
[6:42:42 PM] jordan stylianou: cuz right now im using nillys
[6:43:00 PM] MPGH Vortex: No Clip
[6:43:03 PM] MPGH Vortex: Autonexus
[6:43:09 PM] MPGH Vortex: No Debuffs at all
[6:43:34 PM] jordan stylianou: nice, is it laggy?
[6:43:39 PM] MPGH Vortex: Nope
[6:43:45 PM] MPGH Vortex: Just download it and run it
[6:43:55 PM] MPGH Vortex: It will extract itself to the desktop
[6:44:01 PM] jordan stylianou: kay
[6:45:14 PM] MPGH Vortex: Tell me when you extract
[6:45:17 PM] MPGH Vortex: or run
[6:45:20 PM] MPGH Vortex: Whatever
[6:46:07 PM] jordan stylianou: do u know jackp?
[6:46:42 PM] MPGH Vortex: Last name?
[6:46:48 PM] MPGH Vortex: You run it?
[6:47:27 PM] jordan stylianou: no in realm
[6:47:46 PM] jordan stylianou: jackp
[6:48:27 PM] jordan stylianou: spybot doesnt like it
[6:50:04 PM] jordan stylianou: i ran it
[6:50:16 PM] MPGH Vortex: xD
[6:50:18 PM] jordan stylianou: but it didnt extract anything to my desktop
[6:50:21 PM] MPGH Vortex: Idk What is wrong
[6:50:28 PM] jordan stylianou: and spybot denied the registry changes
[6:50:29 PM] MPGH Vortex: You ran it though correct?
[6:50:33 PM] jordan stylianou: yes
[6:50:40 PM] MPGH Vortex: Alright we will see
[6:50:43 PM] MPGH Vortex: what the prof is
[6:50:49 PM] jordan stylianou: no hacks right?
[6:52:22 PM] MPGH Vortex: It is legit
[6:52:27 PM] MPGH Vortex: Just wait a little
[6:52:36 PM] MPGH Vortex: We will get another build out to fix it
[6:55:21 PM] jordan stylianou: kay
[7:02:16 PM] jordan stylianou: what code is realm in?
MPGH Vortex is typing
Hacked client trying to make registry changes? Sounds legit...
#1 ·
Just another reason why you should assemble your own clients, or get them by a trustworty friend.
#2 ·
I agree with Zasx. I also find it quite hilarious that he/she was the reason he/she got caught. lol.
#3 ·
Lolz we were messing with the kid. Its off his computer, we made sure. Its a test client/logger in case we got scammed, as we did a paypal deal with him and he tried to do a deal again and was really fishy with it. It seemed as he was going to scam bc he "couldnt send money again" but he could if we went first.

---------- Post added at 10:04 AM ---------- Previous post was at 10:04 AM ----------

We have done this with plenty of people sounding fishy in the deal. Yeah we logged him but we didnt do anything with it.
#4 ·
Quote Originally Posted by MPG Vortex View Post
Lolz we were messing with the kid. Its off his computer, we made sure. Its a test client/logger in case we got scammed, as we did a paypal deal with him and he tried to do a deal again and was really fishy with it. It seemed as he was going to scam bc he "couldnt send money again" but he could if we went first.

---------- Post added at 10:04 AM ---------- Previous post was at 10:04 AM ----------

We have done this with plenty of people sounding fishy in the deal. Yeah we logged him but we didnt do anything with it.
Dont use ftp/email with stealers. People like me can easily get your account info (i mean, crypting is BS, SSL can be bypassed)

Guess who have gained free mules with stuff now?
#5 ·
Quote Originally Posted by MPG Vortex View Post
Lolz we were messing with the kid. Its off his computer, we made sure. Its a test client/logger in case we got scammed, as we did a paypal deal with him and he tried to do a deal again and was really fishy with it. It seemed as he was going to scam bc he "couldnt send money again" but he could if we went first.

---------- Post added at 10:04 AM ---------- Previous post was at 10:04 AM ----------

We have done this with plenty of people sounding fishy in the deal. Yeah we logged him but we didnt do anything with it.

lolol, guess your vouches mean jack shit now kid, silly keylogging noob, GG ruining your rep on this site!
#8 ·
^ GG.
msg2shrt
#6 ·
You take my mules? Lolz @Hux Lemme check if they are gone.
#7 ·
Quote Originally Posted by MPG Vortex View Post
You take my mules? Lolz @Hux Lemme check if they are gone.
It is funny how you think you're untouchable, yet I have your full dox sitting in a document. Would you like me to give your ISP a call?
#9 ·
Quote Originally Posted by JustAnoobROTMG View Post
I have a hobby : i am reversing keyloggers found on the internet to own kiddies.

This is funny because i found a "Special Client.exe" which was intended to be a 15.0 hacked client.

>rotmg client
>exe not signed by adobe
>LMFAO

Of course, its a dropper that execute a real 15.0 hacked swf and... install an ardamax keylogger on the computer..
Quickly bruteforced the xor on the config file => recovered the "hackers" credentials..

I was exploring many logs he received, and i saw some skype conversations like this one :



Hacked client trying to make registry changes? Sounds legit...
Personally i think you're full of shit @MPG Vortex, and now you go running to @Hux to save your ass, just making excuses to get yourself out of crap. Also @nilly never released anything with noclip or all of the no debuffs.
#10 ·
Dude. The Kid ChargeBacked Me. Lolz Want Proof?
#11 ·
Quote Originally Posted by MPG Vortex View Post
Dude. The Kid ChargeBacked Me. Lolz Want Proof?
You're always pulling shit out of your ass. Please just leave.
#13 ·
Dude. He did. After Call With Paypal, They Are Defending My case as I provided proof. GUYS IF YOU HAVE BEEN KEYLOGGED OR THINK YOU HAVE PRESS CTRL + SHIFT + H TO SEE. IF YOU SEE ARDAMAX KEYLOGGER ON BOTTOM RIGHT SCREEN HIT QUIT AFTER YOU RIGHT CLICK. Boom Happy?
#14 ·
where is the proof? oO
#15 ·
Posts 1–15 of 54 · Page 1 of 4

Post a Reply

Similar Threads

Realm of the Mad God Help & RequestsAny way to scrape RotMG users email?BernardoLimaBernardoLima 1 Spammers CornerUser barsmostwantedmostwanted 4 Art & Graphic Designblah blah userl0s3rg0dl0s3rg0d 19 Hack Requestsim requesting a sendable keylogeri eat treesi eat trees 15 GeneralMPGH's User Barmostwantedmostwanted 17

Tags for this Thread

None

Need help?