An ex-girlfriend has demonstrated an ongoing ability to acquire files from my computer. I am trying to determine when and how this is being done. One stratagem I want to use is to put "honeypot" files on my computer that are likely to be stolen and opened, and that send me a report whenever they are opened that contains as many details as possible on where they are being opened.
I was thinking of trying to write my own VBA to embed in an Excel or Word document for this purpose, but I am not a good hacker (neither "coder" nor of any color hat).
Requirements are a file or code that, on Windows 10:
- Can disguise itself as/in a file likely to be sought by intruders. E.g., images, videos, or documents.
- Will get through Windows Defender and other standard Windows 10 firewalls.
- When opened will likely be run. (A VBA macro would probably be the least desirable in this regard, because it requires enticing the intruder to override Office's warnings against enabling macros.)
- When run will send or call me with data about its environment. (It is not necessary to obscure the destination of its data. I.e., it can be my plaintext email address or a URL easily associated with me.) Just knowing the time that the file is opened is worthwhile. Other data that would be helpful include: local IP address or traceroute, user/computer name, local system characteristics, local directory contents, other filesystem contents that would further illuminate/confirm who and where it is being accessed.
This doesn't have to be exceptionally sophisticated to be useful. My ex does not have any extraordinary computer skills. It is likely that a more skilled confederate provided her a backdoor into my system, or may be occasionally providing her with file dumps.
My guess is that software that meets these requirements is well known and regularly demonstrated in the hacker community.