Botmaster offers fraud service for noobs

Powered by SC Magazine
 

Includes live support and custom script injection.

A Russian-speaking botmaster is offering a hosted service that allows fraudsters to steal banking credentials without hassle of complex infrastructure.

The outsourced service allowed fraudsters to rent a botnet and gain direct access to victims without the need to setup or maintain the infrastructure. Malware could then be delivered straight to victim machines.

The vendor's bot, compiled from a known banking trojan that spread through social networks, was seemingly large and diverse enough for the man-in-the-middle service.

Customers could issue a specific payload to be delivered to victims chosen according to their country and banking institution. The payload would be injected into a banking session where account information could be stolen and sent to the customer.

The attacks would be coupled with live support from the botmaster operator.

Clients could also attempt to hijack the target machine using an additional remote control component provided by the vendor.

However the service had drawbacks including limited use of bots, that it targets only one victim at a time, and the need for the vendor to be available during the attacks, according to RSA's fraud expert Limor Kessem who received an email from the vendor spruiking the scheme.

“Another side to this service offer is that the fraudster has to be available in real time to those demanding his assistance, unlike man-in-the-browser attacks and automated scripts,” Kessem said. “Hands-on fraud schemes are time-consuming and can only target one victim at a time.”

Alternatively, fraudsters have for years  purchased Remote Desktop Protocol credentials.

Copyright © SC Magazine, Australia


Botmaster offers fraud service for noobs
 
 
 
Top Stories
At the top of her game
A decision to bring digital operations back in-house three years ago has paid big dividends for Tabcorp.
 
Westpac hires SAP man as CTO
Creates four new IT lead positions.
 
Qld Transport to replace core registration system
State's biggest citizen info repository set for overhaul.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  21%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 981

Vote