Diamond FOX Botnet 8.1.0 v8.1.0

DiamondFox – Aka Gorynch, is capable of launching DDoS attacks, RAM scraping for credit card information and passwords, checking for VM and researcher detection and contains a USB/Dropbox spreader. This botnet communicated over HTTP to a C&C developed in PHP.

iamondFox is a HTTP Plugin-Based botnet made for stability and functionality, for establish a stable connection with a considerable amount of bots and will be under constant development. This botnet doesn’t have any function because its based in plugins, that means a stable connection and alot of future functions. This Build contain the following plugins: Loader: Core totally recoded. Stability improved. Size improved (18kb with configurations). No dependencies. Full windows compatibility (x86 and x64 from XP to Windows 10). New cryptographic methods. New installation routines (Bypass AVs proactives). Domain generation algorithm support. Panel: Fully realtime (AJAX/JS) showing the last action/report sent or received for the bot. Statistics coming without the need of refreshing current page. Extra security added: antiforce, captcha and ban suspicious querys. The web panel can be hosted on windows servers without any kind of error. All communication with the panel are encrypted with a custom algorithm. Browsers Password Stealer: *Internet Explorer (All Versions) *Mozilla Firefox (All Versions) *Google Chrome (All Versions) *Safari (All versions) *Opera (All versions) FTP Password Stealer: *Filezilla *JAN 2017: Updated for decrypt the Passwords. Distributed Denedial of Service: *UDP Flood in random ports *HTTP Flood Keylogger: *Advanced Keyboard Hook *Makes a easy readable html log E-Mail Grabber: *Outlook Express *Microsoft Outlook (POP3 and SMTP Accounts only) *Microsoft Outlook (POP3, IMAP, HTTP and SMTP Accounts) *Windows Mail *Windows Live Mail *IncrediMail *Eudora *Netscape (All Versions) *Mozilla Thunderbird *Group Mail Free *Yahoo! Mail *Hotmail/MSN mail *Gmail RDP Grabber: *Grab all stored logins of RDP Point-Of-Sales Grabber (RAM Scraper) *Grab track2 from the Random Access Memory. *Not working with verifon machines. Instant messaging grabber: *Yahoo Messenger (All Versions) *Google Talk. *ICQ Lite (All Versions) *AOL Instant Messenger. *Trillian. *Trillian Astra. *Miranda. *GAIM/Pidgin. *PaltalkScene. *Digsby. Screenshot: *Take a Remote screenshot. SPAM: *Inbox Messages *Custom SMTP *Allow html letters DNS Redirects: *Remote host file editor for DNS redirections. *Needs admin rights. Process Protection: *Protect the file on disk. *Protect the running process of the bot. Bitcoin Wallet Stealer: *Bitcoin core. *Bitcoin-qt. *MultiBit. *Armory. Browser Homepage Changer: *Firefox. *chrome. *opera. Social Networks Message Spreader: *Facebook. *Twitter. Commands: *Download & Execute (Memory): Download and execute a file with a RUNPE *Download & Execute (Disk): Download and execute in Hard drive *Open website [Visible]: Open a website in the default browser *Open website [Hidden]: Open a website Hidden using iexplorer *UDP Flood: UDP flood in a random port *HTTP Flood: HTTP Flood *Activate / Deactivate Host: Start or stop the host file editor *FB/Twitter Spread: Spread a text message through that Networks *Homepage Chager: Change the firefox homepage *Activate / Deactivate PoS: Start or stop the PoS grabber *Activate Span Sender: Start the spam sender in a bot *note: just select one bot for spam, this plugin its beta. *Bitcoin Wallet Stealer: Steal all the bitcoin wallets in the remote machine *Start / Stop Keylogger: start or stop the remote keylogger *Take Screenshot: Take a remote screenshot. *Grab Passwords: grab all stored passwords *Grab FTP: grab all filezilla logins *Grab RDP: grab all stored RDP *Grab Instant Messaging: grab all stored IM logins *Grab MAIL: grab all mail stored data *Update: Update a bot from URL *Uninstall: Uninstall