cha0z
http://carder.pro/member.php?u=37786
Was gonna originally buy a few injects from the guy. Guy conned me into paying him 2k to setup new spyeye for me, with 10k installs. Said everything would be done in a few hours. Then just stalled me out, and was trying to blame the host etc. This guy is a fucking good scammer though. Gotta give him props, that he eats off the crumbs that we earners throw down for them.
he gives very believable story though. I actually sat up with him, while he was 'installing' my shit. heh..
http://carder.pro/member.php?u=37786
Was gonna originally buy a few injects from the guy. Guy conned me into paying him 2k to setup new spyeye for me, with 10k installs. Said everything would be done in a few hours. Then just stalled me out, and was trying to blame the host etc. This guy is a fucking good scammer though. Gotta give him props, that he eats off the crumbs that we earners throw down for them.
he gives very believable story though. I actually sat up with him, while he was 'installing' my shit. heh..
Код:
5/24
(2:04:01 AM) web injects: 1.3.4
(2:04:14 AM) 364000: ok(3:45:30 AM) 364000: bro please try to mostly get me California traffic if possible?
(2:04:19 AM) 364000: so go ahead and setup bro.
(2:04:23 AM) 364000: you said i pay after done right?
(2:04:30 AM) 364000: i'll show you screenshot of LR? or teamview
(2:04:33 AM) web injects: NOT exactly
(2:05:26 AM) web injects: i give u files and script first then u pay , after u give me ur hosting info then i made build
(2:05:40 AM) web injects: and u pay of course for installs and crypt u need
(2:06:07 AM) 364000: you said you had hosting bro?
(2:06:13 AM) 364000: dedicated
(2:06:29 AM) 364000: vds
(2:06:35 AM) web injects: exactly ( but isnt free )
(2:06:50 AM) 364000: i know you said 150 a month right?
(2:06:56 AM) web injects: yep
(2:07:09 AM) 364000: full cpanel/whm?
(2:07:20 AM) web injects: of course
(2:07:25 AM) web injects: u get FULL setup
(2:07:30 AM) web injects: all include
(2:07:40 AM) web injects: exept builder **
(2:09:42 AM) web injects: not backdoored ( but to be safe run it on vmare
(2:09:47 AM) 364000: yeah.
(2:09:55 AM) 364000: i'm spending 2k with you
(2:10:08 AM) web injects: oki lets go
(2:10:20 AM) 364000: hehe
(2:10:26 AM) 364000: ok.. so what i pay for server now?
(2:10:27 AM) 364000: 150?
(2:10:37 AM) 364000: what i pay now?
(2:11:10 AM) web injects: server + build = 750 / U6379132 MEMO/ HOST
(2:11:33 AM) web injects: then script WEBINJECT = 500
(2:11:51 AM) 364000: well, that doesen't really equal out to your quote of you give me everything first
(2:11:53 AM) 364000: then i pay
(2:11:55 AM) web injects: rest is installs ( we load it when ur install are done )
(2:11:59 AM) 364000: but i'll pay build/server right now
(2:12:10 AM) 364000: and then when stuff is handed i'll pay rest.
(2:13:23 AM) 364000: what crypter you using bro?
(2:13:53 AM) 364000: does it have binder ability too?
(2:13:55 AM) web injects: i give u one free then dont worry
(2:16:17 AM) web injects: yes i give u sebed too to acces via VM
(2:16:39 AM) 364000: ok. cool
(2:17:20 AM) 364000: i hope my botnet gets huge man, i think i'll buy 10k loads per week
(2:17:31 AM) 364000: or unless i learn to buy cpanels or rent exploit pack
(2:17:34 AM) 364000: and buy traffic
(2:17:43 AM) web injects: EXPLOIT pack is better
(2:19:17 AM) web injects: 6.0.6001!HOME-PC!9E37EFB9
==========================================
https://online.citibank.com/US/
username=jasondallen
password=royals85
cardNumber=5424180840116385
(2:19:26 AM) web injects: then u get alot of bank login :-)
(2:19:39 AM) 364000: oh, nice, why there's no inject for that?
(2:20:04 AM) web injects: yes citi have inject
(2:20:27 AM) 364000: why you don't have load on yours? it only gived username pass and card number? no mmn dob ssn all that shit?
(2:21:14 AM) 364000: Your transfer was successful! Thank you for choosing Liberty Reserve! Payment Mode Account Date 05/24/2011 11:20 Batch 61848521 From U5104772 (krylon) To U6379132 (AMNESIA) Amount $750.00 Memo host
(2:22:48 AM) web injects: k
(2:22:59 AM) web injects: 94.63.144.68
root urSpqP2Yv6R7
===========================
DB INFO
============================
Database: admin_m
Host: localhost
Username: admin_m
Password: 6neb68MG
----------------------------
Database: admin_f
Host: localhost
Username: admin_f
Password: JQc0wxwj
----------------------------
Database: admin_b
Host: localhost
Username: admin_b
Password: rmvsua4U
(2:23:09 AM) web injects: sav all this info on txt file
(2:23:21 AM) web injects: http://chocost.com/renm/gate.php
===================================
socks: 3278
ftp: 3279
collector: 98372
EncKey=nokinew1
(2:23:29 AM) 364000: ok
(2:23:32 AM) web injects: ===========================================================
http://www.sendspace.com/file/dw10lt
exe
======================================================
(2:23:35 AM) 364000: i can have that citi log?
(2:24:19 AM) web injects: ===================================================
6.1.7600!MMOSES-PC!DA162C64
passcode : tanker15
ip : 64.234.7.112
71.54.53.194
firstname=melvin
mi=
lastname=moses
address1=1617+westbrook+dr
address2=h-1
city=greenwood
state=SC
zip=29649
phone=8649938676
phonetype=Mobile
[email protected]
confirmemail=
onlineid=sfcmoses
passcode=tanker15
question1=In+what+city+were+you+born
answer1=florence
question2=In+what+city+were+you+married
answer2=waycross
question3=Where+did+you+meet+your+spouse+for+the+first+time
answer3=hinesville
country=US
ssn1=247
ssn2=43
ssn3=4685
dob=07/7/1964
drivernr=1-002-357-78
mmn=muldrew
ccnr=4356400015448396
expmonth=03
expyear=2015
cvv=602
atmpin=0484
injectonline=isinjected
(2:24:37 AM) web injects: boa WITH 17k
(2:24:45 AM) 364000: wow
(2:24:47 AM) 364000: hey bro
(2:24:56 AM) 364000: that that sendspace link is invalid
(2:24:56 AM) web injects: ============================= ==========================
6.0.6002!BRITTANYSUE-PC!B21C8D59
Access_ID : al0121
Access_ID : mi65108
state : FL
passcode : gonzalo11
ip : 74.237.93.132
Access_ID : mi65108
state : DC
passcode : gonzalo11
state=FL
keys: orlando
44894164201211969
level
annaleeALevel
2044 SW 22nd terrace
Miami33029
1459542248009
[email protected]
[email protected]
mi65108gona
gonzalo11
LuiasRafael
orlando
448941672420121/21/1969L
-140-040-69-
621-5210lLevel
46357600165118610742544
========================================================
6.1.7600!CHELLE-PC!3E84210A
Access_ID : bmakmartinez
passcode : chtr2820
Balance : not found
controls : not found
email : not found
answers : not found
ip : 173.22.82.51; 173.28.20.212; 74.177.70.220; 98.84.5.117; 98.84.5.179; 98.84.5.198; 98.84.5.214; 98.84.5.23
[email protected]
==========================================================
6.0.6001!CHAPMANS-PC!465DB599
Access_ID : mesaman18
passcode : mortars172
Balance : not found
controls : not found
email : not found
answers : not found
ip : 98.255.32.179
===========================================================
5.1.2600!YOUR-B37CBB045D!7C98E159
Access_ID : nederoy
passcode : rua;wo57
ip : 72.200.158.26
5.1.2600!YOUR-B37CBB045D!7C98E159
Access_ID : jcaputo89
passcode : jjjj8888
ip : 72.200.158.26
=============================================================
6.0.6002!GREG-PC!CE955D2F
Access_ID : skoller5613
passcode : FB3216lt
stateselect=PA
ip : 98.225.251.255
==============================================================
5.1.2600!CSU-9B22KDJ8LGU!CC75929B
Access_ID : dblerman
passcode : trackrunner13
Balance : not found
controls : not found
email : not found
answers : not found
ip : 68.192.208.78
state :NJ
===============================================================
6.0.6001!HOME-PC!9E37EFB9
Access_ID : aliciadallen
state : NV
passcode : N216651N
Balance : not found
controls : not found
email : not found
answers : not found
ip : 67.235.25.187; 67.235.31.193
=============================================================
(2:25:05 AM) web injects: wait i reup it
(2:25:06 AM) 364000: damn dude
(2:25:17 AM) 364000: it gives you thebalance on someo with the injects, and you don't have to log in?
(2:25:18 AM) 364000: that's bad ass
(2:26:00 AM) web injects: http://www.sendspace.com/file/uq54j8
(2:26:04 AM) web injects: exe file
(2:26:19 AM) web injects: u want inject script now ?
(2:27:59 AM) 364000: well, i'll just wait till setup
(2:28:01 AM) 364000: why i need now
(2:28:05 AM) 364000: right?
(2:28:17 AM) 364000: you can delete the sendspace link
(2:29:08 AM) web injects: http://www.sendspace.com/delete/uq54j8/1a10a81b0e4d193157e5943f6953c031
(2:29:21 AM) 364000: cpanel url?
(2:29:27 AM) 364000: http://chocost.com:2080?
(2:29:39 AM) web injects: WHEN i build it wait plz
(2:29:48 AM) web injects: no is it domain
(2:29:50 AM) 364000: oh ok
(2:29:52 AM) 364000: i thought ready
(2:29:57 AM) 364000: let me know.. i'll be here few hours more
(2:30:01 AM) 364000: or shall i just go sleep?
(2:30:14 AM) web injects: no need that is be finish as soon
(2:30:19 AM) 364000: ok
(2:30:25 AM) 364000: and you'll also start installs now to as soon as done?
(2:30:26 AM) web injects: wait i dend u webinject
(2:30:35 AM) 364000: ok
(2:30:37 AM) web injects: send*
\(2:31:26 AM) web injects: no
(2:32:18 AM) web injects: 11 inject USA is ok for u ?
(2:32:33 AM) 364000: i thought you said you'll give all bro? for the deal
(2:32:36 AM) 364000: all USA bank?
(2:32:45 AM) web injects: YES
(2:32:56 AM) web injects: now on this pc have 11 ready to give u
(2:32:58 AM) 364000: whatever is everything is fine with me.
(2:32:59 AM) 364000: ok
(2:33:00 AM) 364000: that's cool
(2:33:15 AM) web injects: then tonight cn send u again 10 other
(2:34:20 AM) web injects: we are agree on all for 500 , now i send u 50% ( 11 inject ) , then u pay me 250 LR
(2:34:29 AM) web injects: http://pastie.org/private/a8w1l8owvis8h6g06i3qg
http://pastie.org/private/5drcfxhvjyu9zxdtpfo5yg
http://www.sendspace.com/file/85aldy
http://www.sendspace.com/file/5di1e6
http://www.sendspace.com/file/dlmgyd
http://pastie.org/1723580 ( amex)
http://pastie.org/1723583 (paypal)
http://pastie.org/1723593 discover
http://pastie.org/1723595 boa
http://pastie.org/1723603 amazon
http://pastie.org/1723610 hsbc
(2:34:32 AM) 364000: bro, i'm not going anywhere dude
(2:34:33 AM) 364000: lol
(2:35:43 AM) web injects: DEDICATED SERVER
==================================
Main IP: 212.117.189.36
Panel Direct Admin - setup
Client ID: 534
License ID: 30512
IP: 212.117.189.36
==================================
(2:36:09 AM) web injects: SERVER IS ACTIVE in 1-2h then i finish ur setup on it
(2:36:21 AM) web injects: and give u ID& PASS to log in
(2:37:16 AM) web injects: crypter: icq 620851032
(2:37:23 AM) web injects: that is robot crypter
(2:37:51 AM) 364000: oh sweet
(2:38:05 AM) 364000: how much is charge per stub?
(2:38:14 AM) web injects: 15wmz
(2:38:20 AM) 364000: not bad dude..
(2:38:24 AM) web injects: :-)
(2:39:29 AM) web injects:
paypal
6.0.6002!SVEN!CE1129CB
[email protected]
login_password=05GreenerPastures
=======================================
5.1.2600!ZOCKER-MAIN-PC!C027F26D
[email protected]
login_password=dickerbuda
======================================
5.1.2600!HOME-7A927CAF48!6455D1E8
[email protected]
login_password=george85
=======================================
6.1.7600!OPERATOR-PC!781750D1
[email protected]
login_password=lacultei123
(2:39:36 AM) web injects: free paypal :-)
(2:39:48 AM) web injects:
discover
5.1.2600!DAVID!70653605
6011298797875410
xpirationDateMonth=08
expirationDateYear=2014
cid=800
birthdateMonth=07
birthdateDate=24
birthdateYear=57
ssn=7161
mothersMaidenName=Vysokikh
password=Nina91327
repeatPassword=Nina91327
(2:44:15 AM) 364000: ;)
(2:44:25 AM) web injects: U6379132 memo:hosting 250$ money for inject
(2:44:29 AM) 364000: k
(2:44:56 AM) web injects: then i wait ur server is OK to finish ur setup , then all are finish
(2:45:10 AM) web injects: like 1-2h max
(2:45:31 AM) web injects: after we can load ur installs
(2:45:46 AM) web injects: or if u want have faster we can load it now
(2:49:33 AM) web injects: inject i gived u u can load into ur zeus too : )
(2:50:40 AM) 364000: really?how i do it?just paste them all into one?
(2:50:51 AM) 364000: into the webinject file?
(2:52:02 AM) web injects: no each code to each script
(2:52:06 AM) web injects: 1/1
(2:52:28 AM) web injects: U6379132 memo:hosting 250$ money for inject ALREADY sent bro ?
(2:52:37 AM) 364000: bro,what's easiest way to download allthse injects bro?
(2:52:39 AM) 364000: from pastie?
(2:52:51 AM) 364000: ifi downloadthe rb file, itdoesen't format right
(2:52:52 AM) web injects: EACH link = 1 inject
(2:53:21 AM) web injects: anyway for spyeye i load into ur exe
(2:53:31 AM) web injects: just keep it on ur PC
(2:53:39 AM) web injects: for future use
(2:54:39 AM) 364000: ok
(2:54:41 AM) 364000: cool
(2:55:07 AM) web injects: u want i start to load some installs usa now or no ?
(2:55:14 AM) 364000: yeah man
(2:55:20 AM) 364000: so they'll beready when servers up
(2:55:25 AM) web injects: OKI
(2:55:30 AM) web injects: how many k ?
(2:55:38 AM) 364000: you said 10k right?
(2:55:51 AM) web injects: FOR 1k $ yeah
(2:56:01 AM) 364000: yeah, so total of everything was 2k
(2:56:05 AM) web injects: exact
(2:56:36 AM) 364000: yeah
(2:56:37 AM) web injects: 250$ for inject + 1k for 10k usa installs
(2:56:45 AM) 364000: hey nobody will be able to steal my servers bro?
(2:56:47 AM) 364000: my botsetc?
(2:56:53 AM) web injects: U6379132 memo:hosting
(2:57:03 AM) web injects: no
(2:57:09 AM) web injects: nobody cant
(2:57:15 AM) web injects: coz u have admin acces
(2:57:23 AM) web injects: + u can change ur ID & pass
(2:57:32 AM) web injects: to have total control
\(2:57:54 AM) web injects: bulletproof , antiabuse , antiddos ,
(2:58:00 AM) 364000: cool
(2:58:18 AM) web injects: + unlimited domain
(2:58:34 AM) web injects: so u can made many domain with ur install on it :-)
(2:58:55 AM) 364000: oh ok..cool
(2:59:01 AM) web injects: oki let me know when rest of LR was sent i start load ur 10k
(2:59:06 AM) 364000: let me finish this download bro, before i fall asleep
(2:59:13 AM) 364000: i'm downloadthe injects firwst
(2:59:14 AM) 364000: then send
(2:59:18 AM) web injects: oki
(2:59:26 AM) web injects: i start to load now
(2:59:43 AM) 364000: http://www.sendspace.com/file/85aldy link is dead
(3:00:00 AM) 364000: http://www.sendspace.com/file/5di1e6 as well
(3:00:04 AM) 364000: you delete them already
(3:00:09 AM) 364000: i'm barely start to download
(3:00:10 AM) 364000: lol
(3:00:17 AM) web injects: wait
(3:00:34 AM) 364000: http://www.sendspace.com/file/dlmgyd too
(3:01:14 AM) web injects: http://pastebin.com/Nwwbyq7S
(3:01:23 AM) web injects: ALLSPACE LINK INTO ONE
(3:01:39 AM) web injects: all sendspace link into one txt file
(3:04:03 AM) 364000: i think some of these are dupe's
(3:04:50 AM) web injects: WHAT ?
(3:05:14 AM) 364000: yeah. boa/disco/paypal
(3:05:16 AM) 364000: duplicates
(3:05:25 AM) 364000: like
(3:05:33 AM) 364000: theres a link for pastie
(3:05:36 AM) 364000: and then a sendspace
(3:05:38 AM) 364000: of same inject
(3:05:46 AM) 364000: the one you put all three in one
(3:05:52 AM) 364000: i have already d/l those
(3:06:01 AM) web injects: maybe tell me exactly all u have then i send u rest of it
(3:06:10 AM) 364000: ok. letme finish.
(3:06:12 AM) 364000: just 2 more
(3:06:16 AM) web injects: kk
(3:07:19 AM) web injects: boa inject from pastebin are new version "ONLY FOR SPYEYE"
(3:07:36 AM) web injects: u can keep THE 2 boa inject
(3:18:08 AM) 364000: we shall see
(3:18:10 AM) 364000: it's test
(3:18:21 AM) 364000: if it's good,will be great. i'll be happy
(3:18:25 AM) web injects: life is a test
(3:18:30 AM) 364000: bro, i need to smoke again. so there is 8 inject right now
(3:18:35 AM) 364000: so what i send you right now?
(3:18:45 AM) web injects: ok so left 13
(3:18:52 AM) web injects: i send rest later
(3:18:56 AM) 364000: ok
(3:18:59 AM) 364000: how much lr i send now?
(3:20:53 AM) web injects: 599032 06:56
U6379132 memo:hosting
(3:21:04 AM) web injects: 250$ for inject + 1k for 10k usa installs
(3:21:36 AM) web injects: if u want send $ for inject later is not a prb
(3:21:49 AM) 364000: bro,i rather wait to send money for installs wheni see it's in panel.
(3:21:52 AM) 364000: i hope you understand
(3:22:05 AM) 364000: i have the money, and am not little kid bro, i send as soon as proof
(3:22:41 AM) web injects: NOW IV ALREADY LOAD 1200 inject
(3:23:33 AM) web injects: and when i load into ur exe i cant take it back
(3:23:47 AM) web injects: so i need be pay before for installs
(3:24:02 AM) web injects: coz not same as server or other shit i can give first
(3:24:30 AM) web injects: ok i continue to load ur installs
(3:24:32 AM) 364000: it's not a lot ofmoney but still
(3:24:38 AM) web injects: + give u some bonus :-)
(3:24:51 AM) 364000: so you're saying
(3:25:08 AM) 364000: in 1-2 hours server will be up, and i will see bots in the panel
(3:25:12 AM) 364000: starting to go in?
(3:25:15 AM) web injects: exact
(3:25:43 AM) 364000: but how will they connect to gate, if it's not even setup yet?
(3:25:46 AM) 364000: is possilbe?
(3:26:02 AM) web injects: ppl infected by my exploit pack
(3:26:13 AM) web injects: i just send infected ppl into ur exe
(3:27:28 AM) 364000: kk
(3:27:34 AM) web injects: U6379132
(3:27:40 AM) web injects: memo:hosting
\(3:27:56 AM) web injects: *DRINK*
(3:28:06 AM) 364000: i think something wrong
(3:28:09 AM) 364000: i have 1250 left
(3:28:17 AM) 364000: everything total was suppose to be 2k
(3:28:21 AM) 364000: what's wrong?
(3:29:19 AM) web injects: 750+1250= 200
(3:29:22 AM) web injects: 2000
(3:29:34 AM) 364000: but you're saying i still owe another 250?
(3:29:39 AM) 364000: doesen't sound correct
(3:29:40 AM) web injects: NO
(3:29:53 AM) web injects: stay 1250 to pay in total
(3:30:02 AM) web injects: already pay 750
(3:30:06 AM) web injects: REST 1250
(3:30:10 AM) 364000: ok
(3:30:21 AM) 364000: and you owe me still 13 injects?
(3:30:22 AM) web injects: if u want send more ur welcome
(3:30:25 AM) 364000: just so we clear
(3:30:29 AM) web injects: yes
(3:30:35 AM) web injects: 13 more + bonus
(3:31:47 AM) 364000: ok.cool throw some canada in ther
(3:31:49 AM) 364000: heehe
(3:31:52 AM) 364000: sentman
(3:32:02 AM) 364000: sorry mouse is fucked on this laptop
(3:32:17 AM) 364000: can y0ou send me loader right now so i can play around with it?'
(3:34:12 AM) web injects: user:4519011272216873
pass: nitry951
injectshere=injectshere
SecurityQuestion1=what color are your eyes
Answer1=blue
SecurityQuestion2=mother last name
Answer2=waldner
SecurityQuestion3=wife last name
Answer3=gross
Chequing 04687-1016740
rbc card number 4519011272216873
Firstname=Ernie
Lastname=Waldner
Streetaddress=472 south 5th street
City=pembina
Postalcode=58271
State=ND
MMN=Waldner
dob_day=23
dob_month=8
dob_year=1973
SSN=643341449
DL=WA LD NE 277N3
credit card CardNumber=5446120033800035
cc_month=2
cc_year=2011
cc_cvv=346
cc_pin=4067
(3:34:55 AM) web injects: canada logs
(3:35:00 AM) web injects: let me finish to looad ur installs and finish ur setup then i send u copy of it
(3:35:17 AM) web injects: i think in 2h that be finish
(3:35:59 AM) 364000: kk.
(3:36:00 AM) 364000: bro
(3:36:05 AM) 364000: what's this logs
(3:36:06 AM) 364000: 5.1.2600!YOUR-B37CBB045D!7C98E159
Access_ID : nederoy
passcode : rua;wo57
ip : 72.200.158.26
(3:36:12 AM) web injects: BOA
(3:38:17 AM) 364000: i gonna take like 1h nap dude
(3:38:19 AM) 364000: see you later
and this is when he starts to get flaky.. he must've realized, he had 2,000 probably as much as he's made all year selling his injects. So now he goes to buy the new nike air jordans.
5:53:45 AM) 364000: hi bro
(5:53:48 AM) 364000: hows it going?
(6:08:17 AM) 364000: bro
(6:08:18 AM) 364000: come on man
(6:08:29 AM) 364000: you said you were gonna have all done in 1 2 hours
(6:08:33 AM) 364000: and this "";"C:\CAUTION\Spyeye 1.34\build_noki.exe";"Trojan horse PSW.Generic8.BDEH";"Infected"
(6:08:36 AM) 364000: not FUD
now he's going to a fine dinner at mcdonalds.
(7:11:13 AM) 364000: dude
(7:11:17 AM) 364000: where did you go now man?
(7:11:59 AM) 364000: dude
(7:48:35 AM) web injects: waiting from data center for news for server
(5:03:51 PM) 364000: what's updude
(6:59:15 PM) 364000: hello?
(12:33:27 AM) 364000: dude?!\
(12:33:35 AM) 364000: where are you at man? this is not cool dude
(4:51:39 AM) 364000: wow. still offline eh? that host takes quite a long time to setup
(4:51:58 AM) 364000: one hour was a long time ago
(4:59:37 PM) 364000: wow dude
(4:59:39 PM) 364000: really?
(4:59:44 PM) 364000: you fucking kidding me?!
(11:53:52 PM) 364000: you're really offline this long?
(11:54:00 PM) 364000: i'll give 12h, then i open ripper report.
5/26 (1:56:39 AM) 364000: still offline eh?
this is when i realize, i'll just stop msging the guy. Waste my energy on him no more.. Little loss for me, Great Job for him.
Is it really that hard to make money in this biz anymore guys? Seriously?
This is some funny shit, because it seems like I don't even have to try to make money carding. But then I deal with these people online, and it's like they're all about making a 1,000 here, or there every few months?
so, yeah, he owes me 2k.
Последнее редактирование:
