Why Malware Crypting Services Deserve More Scrutiny
Summary: Krebs on Security traces the long-running malware crypting service Cryptor[.]biz to a proprietor using the handle Kerens, tied through passive DNS and forum records to email addresses including obelisk57@gmail.com, pepyak@gmail.com and gumboldt@gmail.com, and to a user named Sergey Yurievich Purtov. The service is recommended by the operators of the RedLine and Vidar information stealers, and in December 2009 a user named Kolumb posted on the Antichat forum seeking a cryptor to crypt software every day, sometimes several times a day.
Bottom line: A trusted crypting service examines all types of malware before those samples are first released, giving its operator early visibility into some of the most advanced malware authors' work - which is why Krebs argues infiltrating or disrupting one such service can slow or sideline many cybercrime operations at once.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026