AplusWebMaster
Topic Starter
FYI…
- http://www.finjan.com/MCRCblog.aspx?EntryId=1949
May 07, 2008 - "During our ongoing research we came up against one curious site. The site is hacking/security oriented, and is written in Russian (hmm… last time I've checked it was in Netherlands), and not significantly different from many other similar sites. The same "news" section with recent exploits. The same "articles" section with same "How to get root on server" paper. And the forum with common "SQL Injection FAQ" thread for newbies. What makes difference is the "download" section…. I think it's the first time (we've seen) such a comprehensive, well arranged and recently updated collection of trojans, keyloggers, back-door web-shells and, the most interesting for us, attacker toolkits… All these toolkits installation packages are on the same page. For free! We have seen some of these toolkits for sale numerous times in the past. And here - everything for free… Every toolkit has its installation guide. So, all you need to do in order to run your own crimeware server and a small horde of trojans are some basic unix/php/mysql skills and some server space - thats all. There is even an article covering the installation and operation of the much-hyped ZeuS kit (toolkit for creating trojans, including the server side control for it, with close ties to the actual money laundering operations built in…"
(Screenshots available at the URL above.)
- http://www.finjan.com/MCRCblog.aspx?EntryId=1949
May 07, 2008 - "During our ongoing research we came up against one curious site. The site is hacking/security oriented, and is written in Russian (hmm… last time I've checked it was in Netherlands), and not significantly different from many other similar sites. The same "news" section with recent exploits. The same "articles" section with same "How to get root on server" paper. And the forum with common "SQL Injection FAQ" thread for newbies. What makes difference is the "download" section…. I think it's the first time (we've seen) such a comprehensive, well arranged and recently updated collection of trojans, keyloggers, back-door web-shells and, the most interesting for us, attacker toolkits… All these toolkits installation packages are on the same page. For free! We have seen some of these toolkits for sale numerous times in the past. And here - everything for free… Every toolkit has its installation guide. So, all you need to do in order to run your own crimeware server and a small horde of trojans are some basic unix/php/mysql skills and some server space - thats all. There is even an article covering the installation and operation of the much-hyped ZeuS kit (toolkit for creating trojans, including the server side control for it, with close ties to the actual money laundering operations built in…"
(Screenshots available at the URL above.)