Tuesday, February 26, 2013

[zcewvigr] Trojan email service

Create a service that delivers a forged email from anybody to yourself with a Trojan horse payload that opens a backdoor into your computer.

The existence of the backdoor provides plausible deniability for anything your computer might be observed doing in the future.

The archived email provides a plausible explanation of how the backdoor got on your computer without your consent.  Disguise it to look and act like an e-card from your mother. 

The clever feature is that you yourself can be the sender of the forged email, sending it to yourself, with the backdoor protected so that no one else can access it.  But there's no way for the authorities to know that.

Open source so you can verify that there is only one back door.  For the paranoid, compile the payload yourself. Need to avoid forensic evidence that you were involved as the creator and sender of the Trojan.

For-pay service to discourage mass abuse.

Or, actually send it from a confederate's account to achieve SPF. But the confederate being subpoenaed might be legally tricky.

No comments :