Spy Eye, ZeuS Users Target Tracker Sites
Summary: Operators of SpyEye and ZeuS botnets discussed on a Russian-language fraud forum how to disable ZeusTracker and SpyEye Tracker, the anti-fraud services run by Swiss researcher Roman Hüssy, after repeated DDoS attacks failed to shut them down. Forum users proposed hiring a hitman, poisoning Hüssy with dimethylmercury, and seeding botnet configuration files with legitimate domains such as google.com, myspace.com and vkontakte.ru so the trackers would flag innocent sites and lose credibility with ISPs.
Bottom line: Hüssy said ZeusTracker verifies that a command-and-control server is actually live before adding it to the blocklist, and RSA found a SpyEye 1.3.10 variant carrying exactly the contaminated collector file the forum described - so the trackers held, and the botmasters' own forum posts record the financial cost of being listed.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026