Busting online gaming account stealer :P

[Evil_Cowgod]

I like finding websites that distribute trojans that steal your passwords in games and then trying to work out who made the site :P

I recently found a password stealing program on Kazaa and no matter how hard I try I cant work out who made it. I asks for your username and password claiming it will improve your account and then it emails them to the creator through mail.hotmail.com :eek: When running a packet sniffer I cant find it - tricking it into connecting back to my own computer by editing my computers hosts files didnt work either :( and there doesnt seem to be any email addresses when looking at the program in wordpad.

Can somone else try? Im now more intrested if its possible now.

p.s. Im 99% sure this program doesnt harm your computer but you better not run this file if you dont know what your doing :P

[DiGiTaIErRoR]

Get the program CommView.

It monitors all traffic.

[Celest]

I had a look at the exe you enclosed and there are two email addresses contained within it. They are:

heyhowsitgoing1@hotmail.com
brandonmcandrew@hotmail.com

I would imagine the first is the email he uses to send the stolen accounts from and the second being the recipient.

There is also a string which contains a name, probably his real one as it is also containted within the second email address.

Reporter: 'Say something for Andrew.

I also see he uses this string as his subject on the outgoing emails

A New Stolen Runescape Password.

Good luck i hope you nail the sucker :D

[Evil_Cowgod]

thank! lol Ive got no idea how you manage to do that!

Want me to add your name to the anti scam section of my website or do you want to be called anonymous?

[Celest]

I'll go with Anonymous :D

[DiGiTaIErRoR]

Did you try CommView?