Carberp Code Leak Stokes Copycat Fears
Summary: The source code for the Carberp banking botnet kit, coded by a team of roughly 20-25 hackers and used to steal an estimated $250 million from banks, was posted online for anyone to download after a Lampeduza forum member offered it for sale at a $25,000 starting price on June 5. The two-gigabyte archive includes the Carberp bootkit, which subverts Patchguard on Windows 7 x86 and 64-bit systems, plus components of the UrSnif Trojan and the Citadel kit, and CSIS Security Group's Peter Kruse said the leak gives criminals every chance to modify and add features to the kit.
Why it matters: The ZeuS source leak in 2011 fed directly into Citadel, which Microsoft later used in a legal action against more than 1,400 distinct botnets and which preliminary figures suggest freed at least 1.25 million infected PCs - the same trajectory now sits in a public download.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026