Cyber Risks · Krebs on Security

Who Is Agent Tesla?

Summary: Agent Tesla, a password-stealing program sold since 2014, has drawn more than 6,300 customers paying subscription fees of $15 to $69 in bitcoin for licenses marketed at agenttesla-dot-com. Historic WHOIS records tie the domain's 2014 registration to Mustafa can Ozaydin of Antalya, Turkey, while the site's Discord support channel instructs users on evading antivirus, exploiting vulnerabilities, and bundling the program inside images, text, audio and Office files.

Bottom line: Federal prosecutors have treated this exact pattern as criminal: Colton Grubbs drew 30 months and forfeited 114 bitcoin, then worth over $725,000, and Taylor Huddleston is serving 33 months, both after chat logs showed sellers coaching buyers on unauthorized intrusions.

Read the original at Krebs on Security ↗

Topics
Identity & Access Management
Related