redpill

When you log into your redpill Agent account you will see that there is now a new Agent Menu. You can now change you redpill Agent Password. A new version of the Agent Diagnostic is also available. To prevent the tool from ending up in the wrong hands you will now have to enter a key. Each key expires every few days. To get a key just log into your Agent account and click on ‘Diagnostic Tool’.

redpill Agent will not be detected by anti-virus software but if you have a two-way firewall installed that blocks all outgoing access the firewall will prevent the data from being sent to your account.

The standard Windows Firewall will not block outgoing access. McAfee has a two-way firewall but with the default settings it will also not block redpill Agent. Norton 360 (not Norton Anti-Virus) has a two-way firewall that blocks outgoing access. There are also some others available that will block all programs from sending data over the internet.

The new version of redpill Agent Diagnostic Tool (version 1.1) that you can download from your account will let you know what program file to add to the list of programs that has outgoing access in your firewall to get around this problem. Note that this cannot be done remotely.

To find out how to add a program to the list of programs that has outgoing access (also called the white list), consult the help of your firewall software.

I have just completed a new diagnostic tool for redpill Agent.

redpill Agent Diagnostic Tool

If you don’t receive any data from your remote installation you can test your cover application by running it on your own computer and then running the redpill Agent Diagnostic Tool. It is actually a good idea to test your cover application before emailing it to the target.

The redpill Agent Diagnostic tool is only available to redpill Agent customers. Log into redpill Agent to download the tool (at the bottom of the cover app factory page).

A new cover application has been added to redpill Agent. A cover application is an application that you choose when using redpill Agent to install redpill Agent on a computer that you don’t have access to (for example when the computer is in another country).

The cover application will secretly install spy software on a computer while it’s doing something else. The new cover application is a BMI Calculator (Body Mass Index Calculator). It calculates your BMI and tells you if you are underweight, normal, overweight or obese.

BMI Calculator (Cover Application)

 For more information on how a cover application is used see the post on social engineering.

redpill Agent allows you to remotely and covertly install spy software on a computer anywhere in the world. It allows you to choose from a list of cover applications (a program that gives the impression of doing something else while it secretly installs the spy software) that you can email to a target.

Just emailing the target the file and hoping for the best is not a good idea. Remember that if your first attempt is unsuccessful you will need to wait a few days or weeks before trying again to avoid making the target suspicious.

To improve your chances of success you will need to do some social engineering.

Example:

1. Find out as much as possible about the target (interests, hobbies, etc).
2. Create an alias with an email address and try to befriend the target using email, facebook (or any other social networking site).
3. At some stage, not at the beginning, mention how you managed to get rid of your computer performance problems using a great tool to clean up your registry.
4. When the target asks about the tool, email him/her your registry cleaner (one of the cover applications in redpill Agent).
5. The target will now be eager to run the application and will probably even contact you if he/she has any problems running it.
6. While the target is busy typing you an email to thank you for your help, every key will be recorded and secretly emailed to you!

From that point on the computer will be monitored and you will receive key logs and screenshots.

Please remember to only monitor computers that you are legally allowed to monitor and remember to respect people’s privacy.

redpill Agent allows you to install remotely but you can also install directly at the target computer. What makes redpill Agent better with direct installations is that you only need a few seconds … no setup, configuration or registration is needed at the target computer.

In the past if you wanted to install using a USB drive you could have used one of the cover applications. There is now a tool specifically for this that also runs a scan to see if the computer is already being monitored and allows you to quickly install (less than 5 seconds). You can also stop monitoring a computer using this tool.