A Russian website is selling a spyware kit, called WebAttacker, for approximately ten pounds sterling. The website, which refers to its creators as spyware and adware developers, markets the strengths of its kits, makes the kits available for online purchase and offers technical support to its buyers.
Included in the kits are scripts designed to simplify the task of infecting computers - the buyer need only spam out a message to email addresses, inviting recipients to visit a compromised website. Newsworthy topics are used to lure unwary users. One presents itself as a warning of the deadly H5N1 bird flu virus, providing links to the bogus website, which purports to contain advice on how to protect "you and your family". The other claims that Slobodan Milosevic was murdered and invites users to visit the site for more information. These websites then attempt to download the malicious code remotely onto the user's PC by taking advantage of known web browser and operating system vulnerabilities.
JavaScript code on the infected websites detects the visiting computer's browser version and operating system, including any installed patches, and launches the most appropriate exploit. The exploit downloads a program that attempts to turn off the firewall and install malware, generally a password stealer, keylogger or a banking Trojan. Sophos protection against this threat has been available since 13 March, 2006.
"This type of behaviour is inviting the return of script-kiddies," said Carole Theriault, senior security consultant at Sophos. "By simplifying the task of the potential hacker for a mere tenner, sites like this one will attract opportunists who aren't necessarily very skilled and turn them into cyber-criminals."
"The underground cyber economy is, in some ways, very similar to the one most of us operate by - everyone wants a piece of the action," continued Theriault. "The more common cyber attacks become, the more we will see these types of sites offering kits, databases of email addresses, as well as bespoke Trojans and spyware. So as long as the money continues to flow, there will be interested parties."
Russian website sells WebAttacker spyware kit??antivirus download I don't see a question but that was good info. I will take 3 or those kits. Just jokin'
