[PSA] Trojan and Malware Spread by Gregory Morse [‘chants’] of ExeTools Forum

We have already discussed the Islamic Homosexual agenda of Gregory Morse from Cleveland, Ohio.

Today we want to warn the general public that the same user who uses the nickname “chants” has been distributing Remote Access Trojan (RAT) malware to unsuspecting UNDERAGED FEMALE users through the Exetools Forum where he managed to attain the VIP status after a series of hefty “donations” to Islamic Homosexual Movement within the forum.

You can see that post in the forum here:

https://forum.exetools.com/showpost.php?p=130337&postcount=16

In case the post has been edited or is otherwise not accessible, you can see it here archived for posterity:
https://archive.is/erIjN

Gregory Morse is well known to be selling and distributing homosexual porn videos within the exetools forum but this distribution of malware to target female underaged users of the forum is a new first!

Desperate Exetools Forum Admins Stoop to Using Team-IRA to Drive Traffic to Own Forum

Desperate Exetools Forum Admins now stoop to using the name and fame of Team-IRA to drive traffic to the dying Exetools forum.

With the Exetools forum traffic at an all time low and with many long-time members abandoning the forum like rats fleeing a sinking ship, the forum admins were found stooping to take the most unethical and desperate measures in a failing attempt to retain interest in at least a few of the last remaining members.

From desperately creating new sections in the forum to front-paging fake posts (the latest being the incomplete “VMProtect sources leak” post from last May) to hurriedly re-opening registrations without any safeguards in place, the admins keep trying all methods to keep the sinking ship that is the EXETOOLS forum, afloat.

After putting up the EXETOOLS domain for sale, the admins’ main priority is to keep up the forum web traffic, by hook or by crook, the quality of the content being the least of their concerns.

But what is the cause of the downfall of the once-glorious and vibrant EXETOOLS forum you ask?

The answer comes circling back to just ONE MEMBER: “chants“. The one member found to be the cause of the downfall and anything bad happening in that EXETOOLS forum.

Deserving not even a simple “member” rank, that user “chants” was promoted to the rank of “VIP” just for one reason: to spite a very prominent member of the forum.
With a serious lack of technical skills, the user “chants” excels in one area though: Inciting conflict among users of any and all forums where he is a member of.
One quickly finds after a quick investigation that the user “chants” is at the root of almost all conflicts that arise in the EXETOOLS forum.

When a prominent forum member “WhoKnows” made a post, he was promptly banned.
However the post continues to live on for eternity on the archives.org page and you can view it in its untouched pristine glory:

https://archive.is/AA05B

BAN CHANTS AND KEEP EXETOOLS FORUM ALIVE is the call of the hour and the need of the day

Meanwhile, TonyWeb shamelessly denies having ever been a member of the Team-IRA forum nor having promised to post there. Nearly all the reversing community saw TonyWeb posting content (albeit of low quality) in full swing a few years ago at Team-IRA forum before he was kicked out for cheating.

PSA: TSRh Forum Openly Posts Porn Posts

You can see from the screenshot above a thread claiming to teach how to “Decode erotic images from CD-ROMs of magazines” which was posted at TSRh,ws forum as recently as the 15th of September, 2021.

As evidence, THIS IS THE DIRECT LINK TO THAT OFFENDING THREAD which still continues to be left online at the forum:

https://tsrh.ws/threads/decoding-erotic-images-from-cd-roms-of-magazines.10162/

Posting porn at TSRh.ws is not something new but what is new is that in the chatbox of the forum, the pea-brained Admin of TSRh CACHITO started lamenting that a famous reverse engineer “reported” the TSRh site as containing the illegal pornography!

I mean, anyone with half a brain would know that when someone posts an explicit thread in the forum claiming to provide step by step instructions to “Decode erotic images from CD-ROMs”, that then the forum would get reported sooner or later…

Of course, the usuals continue: TonyWeb continues his financial fraud by patching financial software to steal the bank account login and other financial details of innocent trusting users who use his “cracked apps”.

Let’s not forget Gregory Morse, better known as CHANTS, who now started a new fiasco under the new nick DominicCummings His other aliases include collins, etc at tuts4you.