Inside the Gozi Bulletproof Hosting Facility
Summary: Federal prosecutors charged three men, including 28-year-old Romanian national Mihai Ionut Paunescu, with creating and distributing the Gozi banking Trojan, with Paunescu accused of providing the gang "bulletproof hosting" through powerhost.ro. A hacked database dump from that server showed more than 130 servers, prices sometimes above 1,000 euros per month for a single server, and projects marked "50%SBL" for Spamhaus Block List listings.
Key Takeaway: The leaked powerhost.ro data included drop sites where ZeuS and SpyEye botnets deposited passwords and bank account information stolen from tens of thousands of victim PCs, and the hosting operation's own records tied it to the TowPow spam affiliate program that UCSD's Stefan Savage said dominated the U.S. spam-advertised replica market.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026