Tuesday, June 23, 2009

Your PC "for rent"

bestsecuritytips.com has an interesting article about a network that Finjan calls the "Golden Cash Network". The complete article is HERE

There are attached whitepapers covering the following


  • On the buyer side of the trading platform, batches of 1,000 malware-infected PCs can be purchased for $5 up to $100; depending on territory

  • Partners are paid for successfully distributing the bot and collecting FTP-credentials of legitimated websites through the infected PCs

  • On the seller side of the trading platform, cybercriminals sell batches of 1,000 malware-infected PCs for $25 up to $500

  • Compromised malware infected PCs may be infected with additional malware each time they are purchased by a new "owner"

  • For attacks and exploitations, an exploit toolkit with obfuscated code and the Trojan Zalupko attack toolkit are provided


Very interesting and easy to follow article about a fairly standard botnet.