We have returned

Screamer Cactus: Difference between revisions

From Screamer Wiki
Jump to navigation Jump to search
← Older edit
VisualWikitext
No edit summary
No edit summary
 
(104 intermediate revisions by 30 users not shown)
Line 1: Line 1:
{{Malicious Scripts}}''Screamer Cactus'' is a French [[shock site]] / [[screamer]] hybrid that was popularized by the <span>French </span>forum, ''jeuxvideo.com''. It contains a 2005 picture of a man with a cactus up his anus and an<span> extremely loud version of the song </span>[https://www.youtube.com/watch?v=CoqZZYIfspQ The Cadillac Theory] by Stupeflip playing in the background with an oversaturated effect. The same SWF file that also contains the audio also tries to trick the browser into opening infinite popups. A script in the source code will also try to fullscreen the webpage in a loop and hide the cursor.
{{ContentWarning}}
{{Infobox Shock Site
|name = Screamer Cactus
|image = Caca.jpeg
|imagecaption = Isn't touching one painful enough?
|maker = PyjamaSam / 0xad
|type = [[Last Measure]] / Screamer
|date = April 7, 2012
}}
'''Screamer Cactus''' is a French [[shock site]] created by PyjamaSam.<ref>Also known as 0xad.</ref> It was first described on a [[wikipedia:Jeuxvideo.com|Jeuxvideo.com]] forum by the creator on April 7, 2012.<ref>jeuxvideo.com/forums/1-50-98252783-1-0-1-0-j-ai-fait-un-super-screamer.htm</ref>
 
==Content==
The site contains a picture of a man with a cactus inserted inside his anus, with a small drop of semen coming out of his penis. The malicious [[website]] exploits an automated script along with an embedded [[Flash]] file named out.swf to flood the victim's browser with an endless number of tabs.<ref name="jxflux2">jvflux.fr/Screamer_Cactus</ref>
 
Once opened, the malicious web pages performed the following actions:
 
*It played the first 28 seconds of the song "The Cadillac Theory" by [[wikipedia:Stupeflip|Stupeflip]]. in a continuous, heavily distorted audio loop.
*Triggered [[wikipedia:JavaScript|JavaScript]] fullscreen mode to hide browser controls and hinder the user's ability to close the tabs.
*Applied [[wikipedia:CSS|CSS]] styling to hide the mouse cursor, making it more difficult to interact with or close the window easily.
 
The code functioned identically to [[Last Measure]].<ref name="jxflux2" /> For example, the page utilized a recursive [[wikipedia:JavaScript|JavaScript]] function named caca (French for "poop") that repeatedly spawned alert boxes containing the text "CAACACAAA" effectively freezing the browser.
==History==
Following its release in 2012, Screamer Cactus was quickly adopted for raids on [[wikipedia:Twitter|Twitter]]. The tool is widely believed to have been influenced by Blabla 15-18 ans ("15-18 years [old]"),<ref>jvflux.fr/Blabla_15-18_ans</ref> a notorious raid group from jeuxvideo.com once the most active forum on the French web, and by some accounts, in Europe.
 
By early 2016, a small elite team began roaming [[wikipedia:Twitch|Twitch]] to use "Cactus Screamers" during livestreams. This team eventually grew and laid the groundwork for Twitch Booster, a malicious variant of ''Screamer Cactus''. On April 8, 2016, a streamer named Takeru_46 opened the Screamer Cactus during one of his livestreams. The page stayed open on the broadcast for over four minutes before he managed to close it.<ref name="jxflux2" />
 
The first URL created for Screamer Cactus was ''0xad.net/cactus'', named after the creator's alias, 0xad. During 2012, it was temporarily hosted on the ''ownage.fr'' [[website]] managed by Unifiedlinux which helped further publicize it until April 28, 2013. Other forum users subsequently created alternate domains that redirected to the original site. Most notably, KebabFries registered a domain named after his own screamer website Noelshack.com.free.fr specifically mimicking a typo ([[Noelshack.comm.free.fr]] missing an m) which redirected visitors straight to 0xad's URL.<ref name="jxflux2" />  
==Cactus Note==
The Cactus Note was a "notebook" and urban legend originating from the 18-25 group during the "War Forum." According to jvflux.fr, whoever possesses it gains the terrifying power to curse anyone simply by recording their online handle. Cactus Note was essentially a parody of [[wikipedia:Death Note|Death Note]], except the rules dictate that if a handle remains on the page for more than forty seconds, the unfortunate soul is doomed to be startled by the ''Screamer Cactus'' in real life.<ref>jvflux.fr/Cactus_Note</ref>
==Twitch Booster==
[[File:Twitch Booster.png|thumb|right|One and only destructive ''Twitch Booster'' mid-payload.]]
''Twitch Booster'' was a destructive piece of malware created between 2016 and 2017. It was made by Jewstice<ref name="malwiki">https://web.archive.org/web/20220617003459/https://malwiki.org/index.php?title=Twitch_Booster</ref> of 18-25 forum, a group succeeding the 15-18. It lures people by masquerading as a growth tool designed to "boost" their [[wikipedia:Twitch|Twitch]] or [[YouTube]] channels. Once executed, the software immediately displayed annoying pop-ups of ''Screamer Cactus'' and initiated several other payloads, ultimately rendering the user's computer completely unbootable. Twitch Booster was sometimes referred to as the Risitas virus or the 18-25 virus.<ref>youtube.com/watch?v=uydlQWo3GGQ</ref><ref name="jvflux">jvflux.fr/Twitch_Booster</ref><ref>youtube.com/watch?v=tbzclguVPLg&t=2s</ref>
 
Upon launch on granted administrator privileges, the malware begins a fake installation process accompanied by a 60-second waiting period during which mouse clicks were intentionally reversed. Simultaneously, a [[wikipedia:Microsoft|Microsoft]] text-to-speech voice declared in [[wikipedia:French|French]]:<ref name="malwiki" /><ref name="jvflux" />
 
"''Hello, I'm just the little voice that tells you that 18-25 has just destroyed your PC forever. Have fun fixing it, very happy. Dedicated to the kheys of 18-25.''"<ref name="malwiki" /> (Dans 5 minutes tu n'as plus de PC fils de viol, le 18-25 t'a bien baiser le cul :))
 
Following this, a secondary payload unleashed a relentless flood of message boxes titled "The Elite of the Nation," each displaying the text: "THE 18-25 FUCKED YOU WELL THE ASS OF A BIG SON OF A BITCH." (LE 18-25 T'A BIEN BAISER LE FION PUTAIN DE GROS FILS DE PUTE) As the message boxes appears, the virus silently stripped critical system files from the [[wikipedia:C: drive|C: drive]] and triggered a five-minute countdown timer. A separate warning flashed: "In 5 minutes you no longer have a PC son of rape, the 18-25 fucked you well the ass:)" (Dans 5 minutes tu n'as plus de PC fils de viol, le 18-25 t'a bien baiser le cul :)) During this window, automated scripts spawned countless browser tabs, filling the display with ''Screamer Cactus''.<ref name="malwiki" /><ref name="jvflux" />
 
The malware replaced the desktop wallpaper with an image of Spanish comedian [[wikipedia:El Risitas|El Risitas]] [https://www.youtube.com/watch?v=yTIBjbU-m9g holding a custom-commissioned cardboard sign dedicated to the creators of the malware] (18-25 group from Jeuxvideo.com). Simultaneously, it applied a melting visual effect across the display (similar to [https://www.youtube.com/watch?v=HajECunjYjM Email-Worm.Win32.MeltingScreen]) and looped the remix track ''[https://www.youtube.com/watch?v=oXxQX8Tlg9M Issou Night Club]'' by Remi Flip. Additionally, it forced the CD tray into an infinite ejection loop and used a background VBS script via the SendKeys function to flash the keyboard LEDs rapidly every 100 milliseconds.<ref name="malwiki" /><ref name="jvflux" />
 
Before ultimately restarting the PC with a shutdown message mid-chaos, the malware overwrote the computer's [[wikipedia:Master boot record|Master Boot Record]] with a [https://fr.wikipedia.org/wiki/Snake_(genre_de_jeu_vidéo) custom Snake game retrieved from the OSDev.org forum]. Because this game launched in place of the operating system on the subsequent reboot, the system was left completely bricked and unable to load Windows.<ref name="malwiki" /><ref name="jvflux" />
 
==References==
<references />


== Links ==
== Links ==
<u>NOTE</u><span>: The following websites contains [[:Category:Graphic content|graphic images]], <span style="color:red">and you could also harm your computer!</span>
<font color="yellow"><u>NOTE</u><span>: The following [[shock sites]] contain [[:Category:Graphic content|graphic images]],</font> <font color="red">as well as a [[malicious script]] that may harm your device!</font>
* '''0xad.net/cactus'''
* 0xad.net/cactus
* '''web.archive.org/web/20130627211837/kkk.y0.pl'''
* web.archive.org/web/20150219012946/get-cooki.es
* '''web.archive.org/web/20150219012946/get-cooki.es • '''Other version that contains another screamer animation. It is not pornographic, however the pornographic picture that is also contained in the normal version is included in 1px.
* web.archive.org/web/20140214222521/ownage.fr
* '''web.archive.org/web/20140214222521/ownage.fr''' ''(same as above)''
* web.archive.org/web/20130501153541/pwned.fr
* '''web.archive.org/web/20130501153541/pwned.fr'''
* web.archive.org/web/20140421050951/eofroro.tk
* web.archive.org/web/20161012234903/underporn.fr/cactus
* '''[[Screamer Cactus/SourceCode|Source Code]]'''
 
===Soundtrack===
* screamer.wiki/File:Cactus_screamer_musique.mp3
 
==== Hidden Links ====
* web.archive.org/web/20211025222740/bexandre.alwaysdata.net/cactus
* image.noelshack.com.free.fr/fichiers/2012/52/1356820092-cisla.jpg
* thomasbh.tumblr.com
*jeuxvideo.digidip.net/visit?url=http%3A%2F%2Fimage.noelshack.com.free.fr%2Ffichiers%2F2012%2F52%2F1356820092-cisla.jpg&ppref=http%3A%2F%2Fwww.jeuxvideo.com%2Frecherche%2Fforums%2F0-51-0-1-0-1-0-blabla-18-25-ans.htm%3Fsearch_in_forum%3Dbite%26type_search_in_forum%3Dtitre_topic
*lc.cx/jk9
*urlz.fr/ASU
*bit.ly/NRJ-LIVE-128kbps
*goo.gl/HGUfVR
*tinyurl.com/kftd2bg
*bit.ly/1mhZq80


=== '''Hidden Links''' ===
==See also==
* '''bit.ly/1mhZq80'''
* [[Last Measure]] - A series of websites with similar behavior.
* '''bexandre.alwaysdata.net/cactus'''
* '''goo.gl/HGUfVR'''
* '''image.noelshack.com.free.fr/fichiers/2012/52/1356820092-cisla.jpg'''
* '''lc.cx/jk9'''
* '''thomasbh.tumblr.com'''
* '''tinyurl.com/kftd2bg'''
* '''urlz.fr/1kzp'''
* '''bit.ly/NRJ-LIVE-128kbps'''
* '''minecraft.rhaz.fr'''


[[Category: Shock Sites]]
{{Maliciousnav}}
[[Category: Malicious Scripts]]
{{Comments}}
[[Category:2012]]
[[Category:Shock sites]]
[[Category:Malicious scripts]]
[[Category:France]]
[[Category:Pornography]]
[[Category:Graphic content]]

Latest revision as of 23:11, 23 October 2026

Content Warning!
 The following work contains content and material that some may find shocking. Reader discretion is advised.

Screamer Cactus is a French shock site created by PyjamaSam.[1] It was first described on a Jeuxvideo.com forum by the creator on April 7, 2012.[2]

Content

The site contains a picture of a man with a cactus inserted inside his anus, with a small drop of semen coming out of his penis. The malicious website exploits an automated script along with an embedded Flash file named out.swf to flood the victim's browser with an endless number of tabs.[3]

Once opened, the malicious web pages performed the following actions:

  • It played the first 28 seconds of the song "The Cadillac Theory" by Stupeflip. in a continuous, heavily distorted audio loop.
  • Triggered JavaScript fullscreen mode to hide browser controls and hinder the user's ability to close the tabs.
  • Applied CSS styling to hide the mouse cursor, making it more difficult to interact with or close the window easily.

The code functioned identically to Last Measure.[3] For example, the page utilized a recursive JavaScript function named caca (French for "poop") that repeatedly spawned alert boxes containing the text "CAACACAAA" effectively freezing the browser.

History

Following its release in 2012, Screamer Cactus was quickly adopted for raids on Twitter. The tool is widely believed to have been influenced by Blabla 15-18 ans ("15-18 years [old]"),[4] a notorious raid group from jeuxvideo.com once the most active forum on the French web, and by some accounts, in Europe.

By early 2016, a small elite team began roaming Twitch to use "Cactus Screamers" during livestreams. This team eventually grew and laid the groundwork for Twitch Booster, a malicious variant of Screamer Cactus. On April 8, 2016, a streamer named Takeru_46 opened the Screamer Cactus during one of his livestreams. The page stayed open on the broadcast for over four minutes before he managed to close it.[3]

The first URL created for Screamer Cactus was 0xad.net/cactus, named after the creator's alias, 0xad. During 2012, it was temporarily hosted on the ownage.fr website managed by Unifiedlinux which helped further publicize it until April 28, 2013. Other forum users subsequently created alternate domains that redirected to the original site. Most notably, KebabFries registered a domain named after his own screamer website Noelshack.com.free.fr specifically mimicking a typo (Noelshack.comm.free.fr missing an m) which redirected visitors straight to 0xad's URL.[3]

Cactus Note

The Cactus Note was a "notebook" and urban legend originating from the 18-25 group during the "War Forum." According to jvflux.fr, whoever possesses it gains the terrifying power to curse anyone simply by recording their online handle. Cactus Note was essentially a parody of Death Note, except the rules dictate that if a handle remains on the page for more than forty seconds, the unfortunate soul is doomed to be startled by the Screamer Cactus in real life.[5]

Twitch Booster

One and only destructive Twitch Booster mid-payload.

Twitch Booster was a destructive piece of malware created between 2016 and 2017. It was made by Jewstice[6] of 18-25 forum, a group succeeding the 15-18. It lures people by masquerading as a growth tool designed to "boost" their Twitch or YouTube channels. Once executed, the software immediately displayed annoying pop-ups of Screamer Cactus and initiated several other payloads, ultimately rendering the user's computer completely unbootable. Twitch Booster was sometimes referred to as the Risitas virus or the 18-25 virus.[7][8][9]

Upon launch on granted administrator privileges, the malware begins a fake installation process accompanied by a 60-second waiting period during which mouse clicks were intentionally reversed. Simultaneously, a Microsoft text-to-speech voice declared in French:[6][8]

"Hello, I'm just the little voice that tells you that 18-25 has just destroyed your PC forever. Have fun fixing it, very happy. Dedicated to the kheys of 18-25."[6] (Dans 5 minutes tu n'as plus de PC fils de viol, le 18-25 t'a bien baiser le cul :))

Following this, a secondary payload unleashed a relentless flood of message boxes titled "The Elite of the Nation," each displaying the text: "THE 18-25 FUCKED YOU WELL THE ASS OF A BIG SON OF A BITCH." (LE 18-25 T'A BIEN BAISER LE FION PUTAIN DE GROS FILS DE PUTE) As the message boxes appears, the virus silently stripped critical system files from the C: drive and triggered a five-minute countdown timer. A separate warning flashed: "In 5 minutes you no longer have a PC son of rape, the 18-25 fucked you well the ass:)" (Dans 5 minutes tu n'as plus de PC fils de viol, le 18-25 t'a bien baiser le cul :)) During this window, automated scripts spawned countless browser tabs, filling the display with Screamer Cactus.[6][8]

The malware replaced the desktop wallpaper with an image of Spanish comedian El Risitas holding a custom-commissioned cardboard sign dedicated to the creators of the malware (18-25 group from Jeuxvideo.com). Simultaneously, it applied a melting visual effect across the display (similar to Email-Worm.Win32.MeltingScreen) and looped the remix track Issou Night Club by Remi Flip. Additionally, it forced the CD tray into an infinite ejection loop and used a background VBS script via the SendKeys function to flash the keyboard LEDs rapidly every 100 milliseconds.[6][8]

Before ultimately restarting the PC with a shutdown message mid-chaos, the malware overwrote the computer's Master Boot Record with a custom Snake game retrieved from the OSDev.org forum. Because this game launched in place of the operating system on the subsequent reboot, the system was left completely bricked and unable to load Windows.[6][8]

References

  1. ↑ Also known as 0xad.
  2. ↑ jeuxvideo.com/forums/1-50-98252783-1-0-1-0-j-ai-fait-un-super-screamer.htm
  3. ↑ 3.0 3.1 3.2 3.3 jvflux.fr/Screamer_Cactus
  4. ↑ jvflux.fr/Blabla_15-18_ans
  5. ↑ jvflux.fr/Cactus_Note
  6. ↑ 6.0 6.1 6.2 6.3 6.4 6.5 https://web.archive.org/web/20220617003459/https://malwiki.org/index.php?title=Twitch_Booster
  7. ↑ youtube.com/watch?v=uydlQWo3GGQ
  8. ↑ 8.0 8.1 8.2 8.3 8.4 jvflux.fr/Twitch_Booster
  9. ↑ youtube.com/watch?v=tbzclguVPLg&t=2s

Links

NOTE: The following shock sites contain graphic images, as well as a malicious script that may harm your device!

  • 0xad.net/cactus
  • web.archive.org/web/20150219012946/get-cooki.es
  • web.archive.org/web/20140214222521/ownage.fr
  • web.archive.org/web/20130501153541/pwned.fr
  • web.archive.org/web/20140421050951/eofroro.tk
  • web.archive.org/web/20161012234903/underporn.fr/cactus
  • Source Code

Soundtrack

  • screamer.wiki/File:Cactus_screamer_musique.mp3

Hidden Links

  • web.archive.org/web/20211025222740/bexandre.alwaysdata.net/cactus
  • image.noelshack.com.free.fr/fichiers/2012/52/1356820092-cisla.jpg
  • thomasbh.tumblr.com
  • jeuxvideo.digidip.net/visit?url=http%3A%2F%2Fimage.noelshack.com.free.fr%2Ffichiers%2F2012%2F52%2F1356820092-cisla.jpg&ppref=http%3A%2F%2Fwww.jeuxvideo.com%2Frecherche%2Fforums%2F0-51-0-1-0-1-0-blabla-18-25-ans.htm%3Fsearch_in_forum%3Dbite%26type_search_in_forum%3Dtitre_topic
  • lc.cx/jk9
  • urlz.fr/ASU
  • bit.ly/NRJ-LIVE-128kbps
  • goo.gl/HGUfVR
  • tinyurl.com/kftd2bg
  • bit.ly/1mhZq80

See also

Comments

Comments
Loading comments...
Retrieved from "https://screamer.wiki/index.php?title=Screamer_Cactus&oldid=195984"