4.8 KiB
zeus-guide
GUIDE TO STEAL BANK ACCOUNT LOGS USING ZEUS Dear hustlers, how are you all doing? Thank you for sending us the emails offering your support, we are overwhelmed with the amount of gratitude that you showed us in the last few weeks, today we have come forward to give you another 2021 priceless guide that you can use to steal bank account logins using nothing but Zeus, a remote administration tool AKA RAT. In this .com guide today you will learn how to set up a Remote Administration Tool Zeus (RAT). WHY DID WE CHOOSE ZEUS? We chose Zeus because Zeus is one of the famous trojan-horse in the history of viruses/malware that has infected many computers worldwide to steal banking
information by Man-in-the-browser keystroke logging and the best part is the fact that you can spread Zeus through drive-by downloads and your phishing schemes. REQUIREMENTS: • Zeus Remote Administration Tool (RAT) • Web Server + Database Server (in this example we use XAMPP) ZEUS (RAT): Zeus attached in the folder, unzip and follow the guide! So once you have downloaded the ZIP To start with, we need to install the webserver and database server. Since we’re using XAMPP for this tutorial, you can google how to install XAMPP on your machine, we no longer bloat our articles with information that is already available and can be obtained with a simple google search, so do that first and install XAMPP with the database setup. Once your XAMPP setup is done, open your browser and type “http://localhost/phpmyadmin” to input the username and password, by default the username is “root” and the password is left empty.
After that create a new database, we named it “bot” but you can change it into whatever you want. The database name will be used for the installation of Zeus (remote administration tool). In the next step, you need to download the Zeus remote administration tool file and extract it, you will find 3 main folder builders, other, and server[php]. Create a new folder inside C:\xampp\htdocs. We named the folder “bot” then copied the server[php] contents into C:\xampp\htdocs\bot. Now back again into your web browser and type “http://localhost/bot/install” into the address bar. Input all required fields with the correct information.
INFORMATION: The host address for MySQL filled with your database server IP address. If you run XAMPP it should be your IP address. The database is filled with information about our database name that already created in the step. Fill in the encryption key with any character’s length ranging from 1 – 255 then simply hit the “Install” button to start installing. SIDE NOTE: In case if you get this error below: ERROR: Failed to connect to MySQL server: Host “myusername” is not allowed to connect to this MySQL server. You need to take the following steps to mitigate the error: • Open your “PHPMyAdmin” by typing “http://localhost/phpmyadmin” in your browser then click the “Privileges” tab.
• Click the “edit” button to edit the root user privileges. • In the edit user page, scroll down and find the “login information” section. • Change the Host from “localhost” to “any other name” and press the “Go” button. This is the information preview if Zeus remote administration tool webserver was successfully installed. Now you will start configuring to create the Zeus bot client. Open the builder folder and open the config.txt configuration file. Change the url_config, url_loader, and url_server configuration according to your setting, you can see my setting in the picture below. IMPORTANT: Don’t forget to edit the path of webinjects.txt.
Now for the next step, open the zsb.exe file, in the picture below we have already created the step-by-step to build the bot executable. Just keep following the steps below. After all the build bot config and bot executable on step 7, now we have the new file config.bin and bot.exe copy these two files into the htdocs folder, ours was inside the “C:\xampp\htdocs\bot”.
Now let’s says you will send the generated bot.exe to your victim. After your victim executes your file by opening it you can check your attacking server by opening your browser and typing “http://localhost/bot/cp.php” (you will require to insert your username and password). You will be able to see your new infected victim in the web interface and even view the desktop screenshot of your victim.
Are you excited? We bet you are! Once your victim is successfully infected, you can gather a treasure trove of information from your victim in that treasure trove you will gather the username and password of their banking accounts since this tool can act as a keylogger by capturing all of their log in information which you can use later to log into their bank account to move their funds into your bank account. Good Luck, get your success you deserve it, we will see you on the other side!