Sinapse Protocol

Links do video: Como canais de Youtube estão sendo HACKEADOS?

Video: https://youtu.be/x3XNiboiCFM Como canais de Youtube estão sendo HACKEADOS? - Ft. Teafe

How Youtube channels Hacked

1- https://en.wikipedia.org/wiki/Social_engineering_(security) :

Says wants sponsor and aks to install app

2- Site fake for app down, prints and texts take from: https://wire.com/en/

For search domain register: https://www.whois.net/default.aspx , https://whois.domaintools.com/ , https://who.is/

3-app down from: https://aws.amazon.com/pt/s3/ Rediretcs: https://bitbucket.org/ in downloads area: installer.msi  https://www.reviversoft.com/pt/file-extensions/msi , open with: https://www.7-zip.org/ ,

rename binary.bzWrappedSetupProgram to binary.bzWrappedSetupProgram.cab and extrat with 7zip one more time, file: setup.exe (+600mb generic CIL exe .NET) tool to scan exe: https://mark0.net/soft-trid-e.html , interpret e generate .NET bytecode: https://github.com/0xd4d/dnSpy ,

https://bloghackingu.wordpress.com/2018/04/18/ofuscacao-de-codigos-maliciosos/ , project to clean: https://github.com/0xd4d/de4dot , overshadow: https://www.eziriz.com/dotnet_reactor.htm https://net_reactor.pt.downloadastro.com/ , packer: https://canaltech.com.br/antivirus/O-que-e-um-Packer/, C#:https://pt.wikipedia.org/wiki/C_Sharp , String criptografada: https://www.devmedia.com.br/funcao-para-criptografar-e-descriptografar-uma-string/21834 , dnSpy allow code edit and save exe modified, https://www.virtualbox.org/ , https://docs.microsoft.com/en-us/sysinternals/downloads/procmon , https://www.wireshark.org/ , https://www.sqlite.org/index.html , https://www.enigmasoftware.com/pt/azorult-remocao/ , https://threats.kaspersky.com/br/threat/Trojan-PSW.Win32.Azorult/ , https://www.reg.ru/ domain service contract, https://www.cloudflare.com/ , https://www.ovh.pt/ , https://safebrowsing.google.com/ . 

Dicas e sugestões deixe abaixo nos comentários.  👇