Citadel trojan goes off grid

Powered by SC Magazine
 

Shuts to public rabble, open to trusted botmasters.

The Citadel trojan is being pulled underground with fears of a law enforcement crackdown.

Citadel, built on the shoulders of Zeus, was one of the most advanced and quality trojans available with a sale price of around $2500. 

It was famous for being the first crimeware kit to include a Customer Relationship Management (CRM) module where clientele could request new features from Citadel’s team of software developers.

Citadel’s creators have now announced the trojan will be pulled from the public Russian underground market, to be likely only sold to users whose reputation existing customers have vouched for.

“By selling less they can keep the trojan from being all too widely-spread”, RSA’s research labs wrote.

Selling on the open market attracts law enforcement and gives white hat researchers access to reverse-engineer the software, forcing Citadel’s developers to tweak its functions.

Citadel’s developers were accessories to the crimes committed by their botmaster customers but RSA points out that those behind other crimeware kits like Spyeye and rival Ice have to date escaped arrest.

“…we are seeing the Citadel’s team already taking measures to go deeper underground for their own safety.”

Research last month by S21Sec found the latest version of the banking trojan was outfitted with evasion techniques to help it avoid reverse-engineering.

That anti-emulator would detect sandboxes and, rather than terminate operation like other trojans, would mimic normal functionality but fake connection to botnets in hopes of throwing researchers off the scent.

 

Copyright © SC Magazine, Australia


Citadel trojan goes off grid
 
 
 
Top Stories
The True Cost of BYOD - 2014 survey
Twelve months on from our first study, is BYOD a better proposition?
 
Photos: Unboxing the Magnus supercomputer
Pawsey's biggest beast slots into place.
 
ANZ looks to life beyond the transaction
If digital disruptors think an online payments startup could rock the big four, they’ve missed the point of why people use banks, says Patrick Maes.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  29%
 
Application integration concerns
  3%
 
Security and compliance concerns
  27%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  22%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  4%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 1128

Vote