Malware Command & Control via Instagram DMs

This project is for educational purposes only! Make sure to adhere to Instagram's terms and conditions.

Youtube

• Python 3
• 2 Instagram accounts that you have access to (one to be used by the agent (mechka.py) and the other one for C2)

• Clone this repository

git clone https://github.com/nemuelw/IgC2.git

• Navigate to the project directory

cd IgC2

• Create a virtual environment & activate it

python3 -m venv .venv

# Linux
. .venv/bin/activate

# Windows
.venv\bin\Activate.ps1

• Install project dependencies

pip3 install -r requirements.txt

• Create a .env file in the project directory with these variables correctly set:

IG_USERNAME=<AGENT_ACCT_USERNAME>
IG_PASSWORD=<AGENT_ACCT_PASSWORD>
C2_USERNAME=<C2_ACCT_USERNAME>

• Send a message from the C2 account to the agent account for a DM thread to be created.
• Start the agent on your test system:

python3 mechka.py

• Start interacting with your test system by sending shell commands as messages to the agent account.