Hybrid Hydras and Green Stealing Machines
Summary: Researchers at Trusteer found that portions of the leaked ZeuS Trojan source code have been fused with recent versions of Ramnit, a worm first spotted in January 2010 that accounted for 17.3 percent of all malicious software Symantec detected in July 2011. The resulting strain includes code injection that modifies web pages as they display in the victim's browser, and Kaspersky Lab reported Ice IX, sold in the criminal underground for $1,800, as the first crimeware built on the leaked ZeuS code.
What's compelling: ZeuS's code-injection capability is what defeats the authentication mechanisms many commercial and retail banks use for their customers, and the leak lets that same capability be folded into ordinary, high-volume malware like Ramnit.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026