Virus investigations - Mylobot Proxy Botnet

[@ireallyreallyreallylikethisimg]

Basically half of those "residential" proxies come from that 💀

[@lalajun5902]

I guess that explains ban evaders on taiwanese basket weaving forum

[@pickupmidland3523]

@@lalajun5902 Exactly. 90% of “residential proxies” I try to use on 4chan are already banned for spamming furry stuff.

[@killazaawl]

with great power comes great responsibility... no, i'll just post furry shit

[@highbread817]

I've always wondered who's willingly donating their connection took fraudsters lol

[@KenderGuy]

​@@highbread817 I always thought it would run in the background

[@nwah816]

There's no way a software containing Black Hat in the name is not a honeypot

[@xanzibar]

You should make more of these malware analysis videos in the future. Easily the best KZbin channel regardless though.

[@balllord3546]

not really malware analysis. more of him just reading off someone elses analysis write up

[@korewatori]

I really hope you do more of these. I miss Mutahar doing them, he doesn't really do virus investigations anymore, which is a bit of a bummer but I still really enjoy his content. Cheers :)

[@tumescent]

He became commentary youtuber #7518 unfortunately

[@crow2989]

i remember him addressing his reasoning for this, my memory is faint though

[@asamodi6401]

@Wet Owl And he repeats “at the end of the day” and “basically” for half of the video.

[@namenlosNamenlos]

@@asamodi6401 that's part main few reasons why i stop watching his videos.

[@rabbischlomobengoldbergstein]

He was cool, then turned into Indian penguinz0 😔

[@not-underscore]

moral of the story: make your machine look like a VM best antivirus ever

[@jimmyhopkins1]

Would love to see more virus investigation stuff Kenny this is great.

[@poppych.771]

I mainly use a Residential Proxy to circumvent bans.

[@BarelySociable]

Hey man do you have any direct contact?

[@h8net]

What are you planning?

[@WaldoKrayt]

Ayoooo virus investigations this is great man u gotta keep making these!!

[@Ghaz013]

I appreciate the in depth breakdown of this video.

[@thiagopiwowarczyk2220]

The lack is action over such a bad actor like this website is baffling. It boggles the mind that no arrests where made so far. I have been following this for a while for it’s intersection with the the more broad world of fraud and scam and such bot nets play a key role on that, as you said.

[@ilusions4]

is it not affecting a business or government? Nobody cares

[@Phasma6969]

It's because all these VPN services you see are actually botnet malware.

[@timedeos4320]

It’s easier said than done, don’t just complain without thinking about it

[@ilusions4]

@@Phasma6969 which ones?

[@megadog_]

Post facts that embarrass “protected classes”: immediate deplatforming from everywhere. Scamming, phishing and spamming: nobody cares.

[@evildragon1774]

> "It's sort of like a necromancer with an army of dead" > *shows clash of clan clip* > *WHEEZE*

[@TheBenSanders]

Love me a good virus investigation whether it's Muta or John Hammond. So, of course I'd love this from Mr. Kenny Outlaw!

[@TbjrL]

Gotta love a bit of Mutahar

[@WAKN___]

Awesome! I love your channel! Cheers from Guatemala

[@matthewriley7051]

It's a good day when it is Kenny upload day 🐱

[@guckfoogle2779]

FRENS 4 lyfe

[@nachosncheez2492]

More of these, love the virus deep dives and cyber security deep dives.

[@redslashed]

Thank you so much for this video, i really love watching your videos.💗💗

[@cr00k3d]

The Heisenberg silhouette is just the logo for Black Hat - the security con.

[@zh9664]

Very cool, thanks for an extra interesting video today.

[@AUATUWVSH]

"residential proxies" are also used for ban evasion on Mongolian basket weaving forums

[@Axodus]

why baskets?

[@platinumsun4632]

what? Care to explain the lingo.

[@sycration]

@@platinumsun4632 it's referring to 4chan, like someone thinks it's for anime "Japanese cartoons", and it's a corruption with some Asian country and some activity

[@nokisgp]

good job bro always interesting topics keep it up

[@midimusicforever]

This is one of your best videos in a long while! And that's not a dig at your content, just saying this was very intertesting!

[@nightfury20101]

deeze nut

[@MentalOutlaw]

now that's how you hack the algorithm

[@Cymatic-Mage]

How'd you do that? 😜

[@googleuser64920]

Good video! Btw youtubes auto-deleting of comments has gone very much too far, maybe it's something to bring attention to?

[@adrekiy0]

please do more of these kinds of videos! they're great background noise for working on my projects lol

[@BlackBallBouncer]

For real love videos like this for listening to while I work lol

[@zweitekonto9654]

Try Tsoding channel next time.

[@w花b]

​@@BlackBallBouncer for work you want to find podcasts. This one is too short.

[@muhammadikmal4255]

@@w花b what podcast

[@bravefastrabbit770]

@@zweitekonto9654 Tsoding is great at what he does, but he has been posting a lot of rust videos lately, and I fear that he might be coming out as trans any day now.

[@namenlosNamenlos]

Thank you for these videos.

[@kenosabi]

Def do more of these. Cover all the classics.

[@shaheen4765]

Holy shit , I’m learning window API and etc and this man just explained something that people explain in 2h in under 20min . PURE GOLD

[@luiz_sickboy]

Awesome video

[@SSS-sz8mg]

Final conclusion: Once you install Microsoft’s operating systems your privacy and personal information are gone for good.

[@IIIw2]

i hate microsoft operating system so much, but what you said seems scary. Even Windows 11 wants me to sync with mobile phone and even pay for their services which would require giving debit card information. and Microsoft is doing a lot to spy on people. but i keep windows 11 on a old ssd for work. i use Pop os on 1TB hard drive for Gaming on Steam with proton enabled.

[@paullombardi9506]

Other Final conclusion: Once you install any and all linux operating systems your privacy and personal information are also gone for good.

[@jbmw16]

@@paullombardi9506 This is a paid post

[@olusegunadebayo5306]

Same with Mac

[@acters124]

any and all attack vector will compromise your privacy and personal information, inlcuding your own OS or Kernel or CPU's secret OS or anything that has active capabilities. return to grass and touch it

[@XxguaxinimxX.]

That was really interesting to know!

[@ryannygard3661]

This was a Great video, thanks

[@zacharyoswald4264]

Great info!

[@Yetus]

Fucking amazing video mate. Favorite one by far.

[@pseudo_goose]

11:00 That's the logo of the BlackHat conference

[@paultidwell8799]

This should be a regular feature on this channel.

[@guilherme5094]

👍Thanks.

[@cara-seyun]

This stuff is so interesting

[@IndyAdvant]

hella good video 👌

[@gregheth]

Thank you

[@no_special_person]

Cool vid! 👍

[@UWasAtTheClub20]

Upon reading the title, I initially feared I myself may have fallen victim to this botnet due to my past use of "free proxy" services for torrenting, so I put my hypothesis to the test by first: visiting the service and pasting one from the list into an IP lookup site, and it passed the first part through being listed as a VPN from the ISP "Performative Servers LLC" meaning it's not 'residential'. Then, I configured the aforementioned IP address within my torrent client for use as a TCP Default/TCP Peer proxy and began downloading a movie whilst running netstat in the terminal, and rather than my IP pinging gibberish RU domains it passed the second phase of this test by only pinging MS/Cloudflare IPs (Win10) and the proxy server via TCP as I'd configured it in Tixati.

[@max_ishere]

That Heisenberg logo is the black hat logo

[@TheOisannNetwork]

One of my previous employers used these "residential" proxies to scrape the internet. They used tor and vpns too, but that's not always enough

[@Vampirat3]

Thank you for being all the way pro explaining this. Your content is the best

[@HaLyGjQdTpReMnKmW2X]

Can you avoid viruses by appearing as if you are in a VM?

[@rythewolf1505]

if youre talking about highly sophisticated viruses, i guess? a weird way of getting around it. itd be much safer to run whatever program youre unsure of in a sandbox or VM, or just upload it to virustotal and analyze it yourself. virustotal sometimes gives false positives because it runs programs through so many detection engines (its more technical than that), but its a good resource for making sure what youre downloading is legit

[@applmango]

2:30 love how Iceland is just an island now

[@sigmamale4147]

Jesse, we need to make a botnet

[@mutahartechtips9444]

Love the video. How do I learn about all of this windows stuff? Are there certs or classes that go over this stuff? Thanks!

[@deraile]

Be responsible: "Don't be responsible (for bots all over the internet)." 👍

[@terrydaktyllus1320]

The problem is that the vast majority of Windows users are not responsible. The only way out of this cyber-security mess is education in proper computer science starting with kids at an early age - not just teaching them in school how to use Word, Excel and PowerPoint.

[@IIIw2]

We used Macbooks in elementary school, and as of 2016, when I graduated from high school, we still use. The library also has Macs and Windows PCs. Teachers at the school wouldn't understand what CMD is or how to execute its commands. I opened the command line at school because i had To locate the local IP address to help the teacher to provide to the school IT person so he could do something, I'm curious to know if my former high school is now using Windows 11 in the classrooms.

[@IIIw2]

@@terrydaktyllus1320 in 2016 my first linux operating system was kali Linux when i was in high school and then parrot os. Windows and microsoft have too much control over everyone.

[@terrydaktyllus1320]

@@IIIw2 " in 2016 my first linux operating system was kali Linux when i was in high school and then parrot os." I use Kali in my day job in cyber-security - it's a good OS to learn, looks good on a resume / CV. I don't know Parrot as a Gentoo user but if it works for you then good stuff.

[@IIIw2]

@@terrydaktyllus1320 i don't know how to write a resume or cv. i am trying to make money for bug bounty on hackerone to become a millionaire. i am more self employed and look for vulnerablilties and report them ethically to be paid money. and Yes i know of gentoo, i manly use Kodachi linux for privacy and Qubes os on antoher hard drive and i can use Kali linux for work and Pop os for gaming on steam with proton enabled.

[@gotmodz2981]

As a proxy provider is so funny to watch this hope to see a 2023 video on 5G mobile proxy farms as you can ban a residential proxy but by law they cant ban 4G or 5G mobile proxy as they will ban 1000+ people on that same tower hahahhah

[@creationsmarko]

Waiting for the collab with Mutahar!

[@skillorb9963]

The botnet has found it's new host.

[@chipredacted]

+1 for iRobot scenes

[@-_-Girthbrooks-_-]

I hope this becomes a series. 🤞🏿🤞🏿

[@jackryan8588]

11:20 Uh, akchtually, it stands for Big Haxx.

[@nicolasandrade7794]

im just concerned after watching all these security videos, and im wondering if theres a way to tell if i got a virus on my WIN10 pc without one of those antiviruses that slowdown your pc by a lot? like a antivirus that doesnt slow down your pc

[@rileyl4109]

Malwarebytes

[@adrekiy0]

try something out of the sysinternals suite and look for anything that sticks out too much

[@sammorris2721]

Malwarebytes was good when I ran windows. Just run Linux, much less likely to have problems. Well with viruses anyway. I'd recommend mint for someone new to linux.

[@nicolasandrade7794]

@@adrekiy0 wdym by "sticks out too much"

[@Axodus]

@@sammorris2721 my workflow makes windows extremely difficult to leave behind.

[@salpertia]

I actually got one of those emails and they sent me an attachment of my desktop *I did not download illegally* Sony Vegas or adobe prem pro. Since then I started using VMS for different means and 2fa hardware keys. Made it harder for sure but I get the occasional *hey did you login somewhere unusual?* from time to time

[@ISCARI0T]

2fa is cringe and useless

[@terrydaktyllus1320]

It's those magic words "...primarily affects Windows" that lets me get back a few minutes of my day by not having to watch the rest of the video due to my having rid myself of my Microsoft abuser back when support for Windows 7 ended. But thank you again for the excellent video - it's irrelevance to me personally is no reflection on the consistently high quality of your output.

[@legoenforcer7734]

Don't be responsible for bot bloat, secure your systems today! Only you can prevent bot nets from forming.

[@___gg421]

Bruh I swear your stalking my internet history I just read the article on kebs on security about this.

[@sush7117]

wait, so if i just add virtual device with the name "kvm-quemu" on my real machine it will prevent malware from running?

[@t0asta]

Just turn Krebs blogs into youtube videos! real smart idea for low-effort content.

[@Cookiekeks]

Low effort, high efficacy. No problem here.

[@mortallychallenged1436]

Did you ever made a video that had Anti Virus protection software like Kaspersky, Avast... and the question if they protect against governmental spyware done? I assume that this kind of spyware is build in the OS like Windows 10 and that Kaspersky might be forced by the feds or be infested by fed agents to let these kind of software pass through. Last video I watched was about the end of adblockers on chrome based browsers. At the moment I wonder what I will do about that since I left Firefox after that one drastic Update that fucked up lost of extentions (with no way back and no warning or consent) and questionable politics (that make me wonder if FF is still trustworthy).

[@IIIw2]

i am using Windows 11 on a old ssd but currently i am on linux and i rarely use that old ssd for windows 11. and I can't use that antivirus because they are made for windows os. I am using Kodachi linux for my security and qubes os. and Yes bulid in spyware or backdoors bulid into windows os i am sure that is the case i believe you are correct.

[@IIIw2]

i don't blame you for leaving Firefox, the stupid fucking update. Fuck Firefox that pisses me off. i am using Brave browser i haven't used Firefox in a long fucking time and why would i ever use Firefox again with a stupid fucking update that happens between version 80 and up.

[@IIIw2]

with no way back and no warning or consent). very true. man, i am never doing with firefox again. thank you for reminding me how much i fucking hate that firefox update.

[@TiagoTiagoT]

Wait, it is still not common for antiviruses to monitor behavior of apps, they still just scan the file?

[@aiContent420]

I think my pc is infected. When I search for removal I don't seem to find any solutions besides a complete wipe of the hard drive. Is there any other solutions?

[@jojipoji2322]

Is reformatting a decent and effective base line response to this?

[@Cookiekeks]

Yes

[@GrimMetropolis]

Nothing like a time-share..

[@beautifulislam67]

More and more websites are getting this "checking your browser, please wait." why 🙄

[@nwerd7584]

DDOS

[@__ChiefRocka__]

Thanks for posting a better map of Morocco than most of the social people, you rock 🫵🙌

[@Johnny-ju6di]

I’ve actually gotten one of those funny adult site extortion emails. Didn’t see it until 6th months later and was a good laugh, but does this mean my pc might be infected?

[@xhcgamerx7602]

Probably not.. do you notice anything that's different?

[@-ydk]

i am pirating some programs from one russian site sometimes. 100% sure my machine is infected. But no ransomware so far, no any other problems I have encountered ever. Yesterday I deleted their proxy from my browser's system, idk why my laptop is still alive

[@cirtey29]

You cannot use VPN for webscraping. You need to use rotating residential proxies. Else your webscraping is stopped and your IP blocked.

[@nFyrin]

Remember when SOG used to make these videos

[@BossModeGod]

Welp this explains alot

[@oldsnake1551]

Didn’t Hola VPN do the same thing?

[@ejonesss]

if the hollowing process is attempted on a game that has anti tampering tech will the game detect the attack and kick you off their servers? i know some games use anti tampering to detect cheat bots. can you change the vm strings to trick the malware into working? if the malware is so good at prevent analyzing then how are the security researchers able to able to get what you are saying? maybe why they are not using https is because if you was to self sign a certificate while you can still get an encrypted connection your browser may complain that it cant verify the certificate or it may not even allow you to connect. some browsers will allow you to add an exception to go to the site while other will block it completely.

[@killazaawl]

simplest answer to how researchers got their hands on it is that someone brought in an computer that sent his grandma a porn extortion mail

[@CapuiICazzu]

that logo looks like the black hat conference logo tbh

[@dezzy5995]

hacking the algorithm

[@SibaNL]

Why didn't they use another server for their site tho

[@killazaawl]

i like free sketchy software more than paid possibly sketchy software from sketchy companies

[@bradleybrewer9576]

Screw that I am going to run every sketchy program I can find on the dedicated 100% malware PC until there is no room for any legitimate programs on it or it gets wiper malware then I start over. I have a unlimited amount of windows license keys so I can just use a USB stick to reflash windows if needed be

[@AlexTorres-dq8qt]

More of this

[@Cymatic-Mage]

Does the log4j vulnerability have any relation to this?

[@waterbird2686]

No this type of hack has been going on for way longer than that

[@AnotherSkyTV]

Yep, I KNEW these must be from illegal sources. Can someone enlighten me if there's even a way to get residential ips legally? Because obviously datacenter proxies are from bought vps, mobile proxies are from mobile connection (when you turn airplane mode on and off you get a new ip address) so both can have completely legal sources of these ips. But I don't think there's any other way to get residential ips other than a botnet(?).

[@noahrichardson691]

Wus poppin fellas?

[@MisterConscio]

this virus sneeds

[@ububububububububub1667]

i thought that bh stood for bad hackers instead of black hat lol

[@TheHistoryofBiology]

Can a robot write a symphony?

[@mylobits]

Imagine your website call mylobits, and you are computer engineer 😅... Jesus!

[@maqabayker]

Man, I need help. I am getting autoinsurance spam mails. Do you know a way to solve that? I stupidly opened one of them and now they are coming every hour.

[@carlo6953]

Once they have your email there's no good way to stop them, best way to deal with it is just create an email rule that auto-sorts anything with common terms into a single folder you can periodically empty directly to the trash.

[@maqabayker]

@@carlo6953 alright, thanks man. I'll do that. But blocking them kinda decreases the frequency of spams.

[@emanuelgoncalvessantos4499]

Gg boi

[@danielfrolov2628]

its also kind of funny plot twist that most of domains that Mylobot uses coming from Russia :D

[@SB-qm5wg]

Privacy ain't shady in this new world toilet.

[@sotecluxan4221]

!!

[@rusi6219]

Top lel

[@tonythai5991]

Another reason to go linux.

[@juicygirls3989]

Also for carding , they are a lot used for it

[@xr.spedtech]

Milo huh ... Man's super thirsty rn ...

[@SibaNL]

I'll just name my device vmware