Forest Global Training Partners

Cyber Risks · Krebs on Security

Zeus Trojan Author Ran With Spam Kingpins

Summary: A leaked database from Spamdot, an exclusive spammer forum, revealed that the author of the ZeuS Trojan posted there under the nickname "Umbro," selling installs of compromised machines at $60 per 1,000 systems and offering a mailing list of presidents and CIOs that sold in five hours. By the time Spamdot closed in September 2010 the ZeuS author was using the nickname "Slavik" and announced he would merge his Trojan's code with SpyEye, while RSA found a custom "ZeuS 2" botnet built in August 2010 that had logged more than 200,000 infected PCs by August 2011, with "Slavik" among four logins authorized to reach its control server.

What you should know: The person who wrote the Trojan tied to hundreds of millions of dollars in theft from small and mid-sized businesses was also a paying customer of other botnets, buying installs in bulk and renting infrastructure from the operators of Grum and Cutwail - the malware economy runs on the same few suppliers trading with each other.

Read the original at Krebs on Security ↗

Topics
Malware
Related