redpill

redpill Agent uses different cover applications to install an advanced key logger remotely on a target computer anywhere in the world. There are several cover applications to choose from and we are continually busy adding new ones.

We have just added an Encrypted/Zipped Self extractor file.

Encrypted/Zipped Self Extractor

You can email the target the file with a message saying that your pictures or important documents are encrypted in the attached file. redpill Agent will secretly be installed the moment the target runs the attachment.

A bug in the BMI Calculator Cover Application that prevented redpill Agent from being installed on Windows Vista/7 has also been fixed.

To find out more about redpill Agent and other spy products go to http://www.redpill.co.za.

One of my redpill Agent customers gave me some great feedback. She wanted to purchase a car and found a car online but half way through the deal realized it was a scam. All she had was the person’s yahoo email address. She used redpill Agent and got the login details of the person’s yahoo account, a lot of personal information and a list of people who was involved in the scam.

This is how she did it …

She firstly didn’t make them aware of the fact that she realized it was a scam. She then emailed them that she was ready to make another payment but she wanted to use a different more secure payment system.

In redpill Agent she chose 3 alert words that she new the person would type (2 being money and car). She chose the BMI Calculator Cover application but after she downloaded it she renamed the exe to EncryptedSelfExractor.exe. She zipped the file and emailed it to the scammer. In her email she said that the payment details and needed reference number is in the attached encrypted file. She even gave a decryption password.

When the person opened the attachment they must have thought something was wrong or maybe they thought she made a mistake by zipping the wrong file as the BMI Calc must have opened … but it didn’t matter as the moment it opened redpill Agent was installed and started working.

Notes from redpill:

• The above story really happened but was done by a customer and not redpill. Please remember not to use redpill Agent illegally.
• Due to this great feedback redpill will shortly add a new Encrypted Message cover application. 

When you log into your redpill Agent account you will see that there is now a new Agent Menu. You can now change you redpill Agent Password. A new version of the Agent Diagnostic is also available. To prevent the tool from ending up in the wrong hands you will now have to enter a key. Each key expires every few days. To get a key just log into your Agent account and click on ‘Diagnostic Tool’.

redpill Agent will not be detected by anti-virus software but if you have a two-way firewall installed that blocks all outgoing access the firewall will prevent the data from being sent to your account.

The standard Windows Firewall will not block outgoing access. McAfee has a two-way firewall but with the default settings it will also not block redpill Agent. Norton 360 (not Norton Anti-Virus) has a two-way firewall that blocks outgoing access. There are also some others available that will block all programs from sending data over the internet.

The new version of redpill Agent Diagnostic Tool (version 1.1) that you can download from your account will let you know what program file to add to the list of programs that has outgoing access in your firewall to get around this problem. Note that this cannot be done remotely.

To find out how to add a program to the list of programs that has outgoing access (also called the white list), consult the help of your firewall software.

Both these products allow you to secretly monitor a computer remotely, so how do you choose?

For a full list of features see http://www.redpill.co.za/RedPillSpyEditions.aspx.

In short, my recommendation:

If you have some access to the computer, choose redpill Spy Pro. You will need to install, register and setup the remote monitoring on the computer you want to monitor. With redpill Spy Pro you will have access to more data as you can choose more alert words and you can view all the screenshots locally (apart from the data that is emailed to you).

If you have very little access to the computer (for instance only once and only a few seconds) choose redpill Agent. With redpill Agent you don’t need to register the computer you want to monitor and you don’t need to setup anything on the computer itself. All you will need is 5 seconds to install and you will only need to access the computer once.

If you have no access and you need to install remotely your only option is redpill Agent.

I have just completed a new diagnostic tool for redpill Agent.

redpill Agent Diagnostic Tool

If you don’t receive any data from your remote installation you can test your cover application by running it on your own computer and then running the redpill Agent Diagnostic Tool. It is actually a good idea to test your cover application before emailing it to the target.

The redpill Agent Diagnostic tool is only available to redpill Agent customers. Log into redpill Agent to download the tool (at the bottom of the cover app factory page).

A new cover application has been added to redpill Agent. A cover application is an application that you choose when using redpill Agent to install redpill Agent on a computer that you don’t have access to (for example when the computer is in another country).

The cover application will secretly install spy software on a computer while it’s doing something else. The new cover application is a BMI Calculator (Body Mass Index Calculator). It calculates your BMI and tells you if you are underweight, normal, overweight or obese.

BMI Calculator (Cover Application)

 For more information on how a cover application is used see the post on social engineering.

redpill Agent allows you to remotely and covertly install spy software on a computer anywhere in the world. It allows you to choose from a list of cover applications (a program that gives the impression of doing something else while it secretly installs the spy software) that you can email to a target.

Just emailing the target the file and hoping for the best is not a good idea. Remember that if your first attempt is unsuccessful you will need to wait a few days or weeks before trying again to avoid making the target suspicious.

To improve your chances of success you will need to do some social engineering.

Example:

1. Find out as much as possible about the target (interests, hobbies, etc).
2. Create an alias with an email address and try to befriend the target using email, facebook (or any other social networking site).
3. At some stage, not at the beginning, mention how you managed to get rid of your computer performance problems using a great tool to clean up your registry.
4. When the target asks about the tool, email him/her your registry cleaner (one of the cover applications in redpill Agent).
5. The target will now be eager to run the application and will probably even contact you if he/she has any problems running it.
6. While the target is busy typing you an email to thank you for your help, every key will be recorded and secretly emailed to you!

From that point on the computer will be monitored and you will receive key logs and screenshots.

Please remember to only monitor computers that you are legally allowed to monitor and remember to respect people’s privacy.

redpill Agent allows you to install remotely but you can also install directly at the target computer. What makes redpill Agent better with direct installations is that you only need a few seconds … no setup, configuration or registration is needed at the target computer.

In the past if you wanted to install using a USB drive you could have used one of the cover applications. There is now a tool specifically for this that also runs a scan to see if the computer is already being monitored and allows you to quickly install (less than 5 seconds). You can also stop monitoring a computer using this tool.

redpill has just published a new product called redpill Agent. redpill Agent is spy (surveillance) software that allows you to remotely monitor a computer that you don’t have physical access to. It can be remotely installed and it also allows you to monitor multiple computers with one license.

redpill Agent will not be replacing redpill Spy as it’s two different products and each product has it’s own unique features and benefits.