nested_callback

Sure. My apologies, didn't mean to offend - came from reddit. I'll take 'nested_callback' if it's available.

I mean, there's probably more than enough intent here for prosecution. There's a fairly significant difference in selling a RAT that does remote administration, and selling a RAT that includes bulletpoint features to evade antivirus detection, persist through removals, and other features explicitly against the wishes of the device owner while the author actively and exclusively only advertises on script-kiddie forums and provides advice and encouragement of malicious infections.

I don't think I've ever seen people gone after for the former, even when it's been abused by miscreants.

At least in the US, people already "go after" security researchers all the time (at least the companies not smart enough to realise just how much a well meaning email can save them).

Your ssh client supports binary re-packing to evade antiviruses, hidden monero mining, and webcam and microphone capture to hidden file with "methods to disable the camera LED"?

For the people that think this is legitimate software, this is not legitimate software. It is sold and encouraged as malware, used to blackmail girls (barely women) - that's what "cam capture" is for - keylogger, general malware, backconnect proxy, auto-start and persistence.

See https://unit42.paloaltonetworks.com/imminent-monitor-a-rat-d... for more details and screenshots/quotes of posts by the creator of the tool.

This is _not_ for server administration.

This is _not_ like PuTTY or Remote Desktop. This is like Blackshades or Orcus. It is malicious, only sold for malicious usage.