Feeds

Tracking website eyeballs SpyEye

Security researcher plays Trojan peekaboo

5 things you didn’t know about cloud backup

A website designed to track the control system of the SpyEye crimeware Trojan has been established.

The site, spyeyetracker.abuse.ch*, was set up by Swiss security researcher Roman Hüssy, and modelled on his successful Zeustracker website. The latter site, which was established in early 2009, has helped security researchers to track the activities of the infamous botnet, which is linked to numerous instances of banking fraud.

Chatter on Russian cybercrime forums has suggested the developer of ZeuS has handed over development of the customisable crimeware toolkit to the miscreant behind SpyEye. For now, at least, malicious activities associated with ZeuS far outnumber those associated with SpyEye.

Zeustracker reports 497 ZeuS C&C servers, with 204 of these command nodes active on Tuesday morning. Its sister site pinpoints 61 SpyEye command and controls servers, 29 of which are active.

Both ZeuS and SpyEye are toolkits that allow the creation of customised Trojans. Each is sold through carding and other black-market forums for hundreds of dollars per licence.

Anti-malware detection of Trojans created by both tools is far from satisfactory, with 40.9 per cent detection for SpyEye and 36.9 per cent for ZeuS, according to the respective tracker sites run by Hüssy.

Other strains of financial malware and crimeware toolkits doing the rounds include Bugat, Clampi and Gozi. Bugat was distributed via a high-profile phishing campaign targeting LinkedIn users last month, an attack that captured the attention of security researchers and makes the malware a potentially good candidate for closer tracking in future. ®

*Both The SpyEye and Zeustracker websites link to live cybercrime domains. Casual surfers are strongly advised not to follow links from either site.

Next gen security for virtualised datacentres

More from The Register

next story
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
Microsoft: We plan to CLEAN UP this here Windows Store town
Paid-for apps that provide free downloads? Really
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Hear ye, young cyber warriors of the realm: GCHQ wants you
Get involved, get a job and then never discuss work ever again
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.