PandaLabs security researchers revealed on May 27, 2010 that they had discovered a network selling botnets used for targeting Webmail systems and social networking websites.
According to the researchers, the network contains a big catalogue featuring programs to target social networks and webmail services such as Twitter, Yahoo, Facebook, Gmail, Hi5, Friendster, MySpace, MyYearBook, YouTube and Tuenti, said PandaLabs. The network displays a catalogue of all the botnets for sale along with the details of activities they could perform. As per the reports, the botnets are capable to collect identity information and friends' name. Thereafter, they forward friendship requests, messages and comments as per the buyers' wishes. Besides, the botnets could even crack CAPTCHA security system for creating webmail accounts. The security firm also discloses that the botnets' prices range between $95 and $225. An interested user could also purchase the whole set of botnets for $4,500. Moreover, the network has given assurance to purchasers that these botnets will not be caught by antivirus software as they are modified to avoid detection. These botnets are modified for certain websites. The target list includes both the globally known social networking websites or communities and regional websites like Tuenti, Yahoo UK. Luis Corrons, Technical Director, Panda Labs, said that they were investigating the network, but the important thing to note was that malware offered numerous advantages for cyber criminals, as reported by The Epoch Times on May 30, 2010. The catalogue of salable botnets also features details about many activities for which they could be employed. Some of these botnets are 'innocent' as they could only be used to create e-mail accounts, while other are insidious and particularly focused on fraud like identity theft, stealing of photographs, etc, said Corrons. He further states that this business is flourishing not just because malicious people are involved in the creation of threats, but also because some people are ready to pay for fulfilling their desires. Corrons has clarified that this business will continue to thrive until collective efforts are taken to prevent people from falling victims this way. |
