Exploring the Cybercrime Underground: Part 2 – The Forum Ecosystem
Summary: Unit 42's second Cybercrime Underground post maps the forum ecosystem into distinct roles: developers who build RATs, exploit kits, crypters, keyloggers and infostealers and sell them rather than use them, plus trainers, service providers and buyers whose skills range from experienced criminals to beginners. It prices specific tools - LuminosityLink at $40, Ozone RAT at $20 for Standard and $50 for Platinum, Netwire from $50 to $160, Orcus at $40, Keybase at $50, Kazy Crypter from $13 for 30 days to $35 for 180 days, Ghost Crypter from $12 a month to $50 lifetime, and hostmy.su bulletproof hosting from $39.99 to $700 per month.
Why it matters: A full-featured RAT with keylogging and payload download costs $40, and a crypter to push it past legacy security controls starts at $13 for 30 days - the barrier to a working intrusion is a few tens of dollars, and DDoS services priced at $10 to $200 a month are noted as effective against medium-sized enterprises even where large ones are protected.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026