Security researchers have recently discovered a spyware development kit being sold for under $20 on a Russian website.
Experts from the cybersecurity firm Sophos found the WebAttacker toolkit on a site run by “self-taught spyware and adware programming experts.” Anyone can purchase this software directly from the website, and the provider even offers technical support to buyers.
The WebAttacker kit includes scripts designed to simplify the “tasks of infecting computer systems and sending spam,” aimed at tricking web users into accessing a malicious site.
Ron O’Brien, a senior technology analyst at Sophos, noted that this software package also contains several built-in “scripts” detailing the infection methods used by malware— for example, scripts that reference avian flu prevention or the death of Slobodan Milošević— to assist cybercriminals in “understanding” attacks that leverage social event triggers.
Spam with misleading links to the latest social issues is often used to deceive users into visiting web pages containing malicious code that can execute through exploiting vulnerabilities in browsers or operating systems.
Offering spyware development software at such a low price means that technical skills are no longer a barrier for newcomers in the field. Now, even those with no prior knowledge can easily engage in the world of cybercrime.
However, this is not the first time software kits supporting malware development have been discovered. Earlier this year, researchers at Sunbelt Software also uncovered a specialized program that aids in developing trojans and keyloggers, featuring a very user-friendly interface.
HVD – (eWeek)
