Crimeware-as-a-Service offers custom targeting

Are you a criminal looking for vulnerable computers in a particular geographic area so that you can, say, attack a specific bank based in that region?

Or do you need some compromised computers to serve as proxies or relays?

The old days, where you had to go out and infect the computers yourself, are over. These days, you can rent part of an existing botnet for your nefarious purposes, using simple Web-based interfaces to commit your dastardly deeds.

One example is that of Vawtrak, a banking malware botnet that is also known as NeverQuest and Snifula.

“If you look at the client-side, the commands used, and the debugging code, suggests that it’s more user friendly than some of the other malware we look at,” said James Wyke, senior threat analyst at Oxford, UK-based Sophos Ltd.

To read this article in full or to leave a comment, please click here