From a21a1eb6fb68e051b9a20810d296ce09c50b09b0 Mon Sep 17 00:00:00 2001
From: AleksaMCode Victim's computer has to have an internet access in order to send the stolen data using SMTP for the exfiltration over a network medium.
Data exfiltration is an unauthorized transfer of data from a computer/device. Once the data is collected, adversary can package it to avoid detection while sending data over the network, using encryption or compression. Two most common way of exfiltration are:
This approach was used for the Windows exploit. The whole payload can be seen here.
This approach was used for the Windows exploit. The whole payload can be seen here.
In order to use the Windows payload, called payload.dd
, you don't need to connect any jumper wire between pins.
In order to use the Windows payload (payload.dd
), you don't need to connect any jumper wire between pins.
Once passwords have been exported to the .txt
file, payload will send the data to the appointed email using Yahoo SMTP. For more detailed instructions visit a following link. Also, the payload needs to be updated with your SMTP information.
In order to use the Linux payload, called payload2.dd
, you need to connect a jumper wire between GND
and GPIO5
in order to comply with the code in code.py
on your RPi Pico. For more information about how to setup multiple payloads on your RPi Pico visit this link.
In order to use the Linux payload (payload2.dd
) you need to connect a jumper wire between GND
and GPIO5
in order to comply with the code in code.py
on your RPi Pico. For more information about how to setup multiple payloads on your RPi Pico visit this link.
Once passwords have been exported from the computer, data will be saved to the appointed USB flash drive. In order for this payload to function properly, it needs to be updated with the correct name of your USB drive, meaning you will need to replace UsbStick with the name of your USB drive in two places.