Malware software for sale

[impar]

Greetings!

"Analysts at RSA Security Inc. early last month spotted a single piece of PHP code that installs a phishing site on a compromised server in about two seconds, the vendor noted in its monthly online fraud report for June, released on Tuesday.
The code contains all of the HTML (Hypertext Markup Language) and graphics needed for the fraudulent Web site, which spoofed a financial institution that RSA did not name in the report. The ".exe" file automatically installs the code and graphics in the right directories, RSA said.
It means the hacker did not have to repeatedly access the compromised server to upload graphics or other code for the site, potentially reducing the chance of the computer's security software or network software detecting something awry, RSA said."
in, http://news.yahoo.com/s/pcworld/20070710/tc_pcworld/134322;_ylt=Auyz0p.95EAHhdyI7.XNtgcjtBAF

[impar]

Greetings!

Going Undercover in the Slimy World of Phishing

A security analyst learns the lingo and gains cyber-crooks' trust to penetrate the phishing underworld.
...
"It basically puts high-level hacking tools … into the hands of almost any Internet user—including novices—providing they have an eBay and PayPal account," said Tier-3 CTO Geoff Sweeney in a statement.

Sweeney said that where previously would-be hackers "had to score 'brownie points' to gain access to the hacker forums and source the kits"—as did Harbert—the fact that they are now on open sale on eBay is "very worrying."

Although he hasn't looked at the eBay kits, Harbert said that if what Sweeney claims is true, the ethical kits are likely being used to commit cyber-crimes. "Most ethical hacking courses focus [on] techniques, rather than hacking kits, per se," Harbert said. "But, there may be ethical hacking kits that I'm not aware of. If there are, it is almost certain that they would be leaked to the black-hat hackers and used for fraudulent activities."

[impar]

Greetings!

Malware construction kit authors arrested, to be tried

Back in July, we covered the appearance of a sophisticated malware generator named Pinch Pro. Although not a Trojan itself, Pinch Pro provided a framework for malware authors to create and design their own worms and trojans, each of which could be specifically tailored to report certain data, zombiefy the PC, or kill certain commands/files. Imagine something like Build-A-Bear, but designed for malware rather than fuzzy bear creation, and you've got the right idea.

Pinch became popular in Russia, which meant is also became something of a headache for IT services generally and government services in particular. In effect, the malware-builder proved a bit too popular for its own good, and ultimately attracted the attention of Russian authorities. According to Kaspersky Lab, the Russian FSB (Federal Security Service) has identified the two authors of the program, Ermishkin and Farkhutdinov, and will soon take expose them to the cheery Russian legal system.

[impar]

Greetings!

Tornado on the Loose

We have recently received a new Web exploit pack called Tornado that contains exploits for 14 vulnerabilities by default. The pack also contains the usual stats and admin pages; however, the greatest success of this pack appears to be how well it has stayed under the radar.

[impar]

Greetings!

Malware bad guys tout new trojan guaranteed to evade filters

One of the players in the burgeoning malware industry has apparently crafted itself a new "super" Trojan, and is offering it up for sale as a guaranteed detection evader—or your money back. At least, one assumes there's an "or your money back" clause in there somewhere, since black hats willing to pay $1,300 for an illegal software license are probably also willing to pay a desperate Russian peasant $1,300 to beat a malware author to death with a leftover bust of Lenin, before tossing his body in the Volga river.

[impar]

Greetings!