Styx Crypt Makers Push DDoS, Anti-Antivirus Services
Summary: Krebs on Security reports that the makers of the $3,000 Styx Pack exploit kit bundle an anonymous antivirus scanning service at captain-checker[dot]com that uses at least 17 antivirus products and blocks those products from reporting new malware detections. The same server, on a Windows workgroup called "Reality7," hosts 12 other sites including uptimer[dot]biz and reality-guard[dot]com, a DDoS protection service advertised by Styx sellers Alexander "Nazar" Nazarenko and Max "Ikar" Gavryuk.
Key Takeaway: A criminal enterprise selling an exploit kit is also selling DDoS protection and running a scanner built to keep 17 antivirus engines from phoning home about its customers' malware - meaning the tools your detection stack relies on can be deliberately blinded by the same group that profits from the attack.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026