Revisiting the Spy Eye/ZeuS Merger
Summary: In October 2010, Krebs reported that the authors of the SpyEye and ZeuS banking Trojans planned to stop ZeuS development and merge the two malware families into one trojan, and by early February 2011 beta releases were appearing in the wild on a nearly daily basis. Trend Micro spotted SpyZeuS components including an add-on that grabs credit card numbers from hacked PCs and a plugin aimed at Trusteer's Rapport anti-Trojan tool, while Seculert posted screenshots of an administrative panel letting customers control botnets through either the ZeuS or SpyEye web interface.
Why it matters: A single hybrid kit with a shared control panel and near-daily feature updates lowers the bar for anyone running a banking botnet, and its plugin specifically targets Rapport, a tool banks have relied on to protect customer sessions.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026