A black market seller is offering source code of the Carberp trojan for the basement price of $5000.
On offer was access to Carberp's source code, along with web injections, the source code for a worm known as Gazavat two exploits for vulnerabilities in Windows, and additional malicious features.
Only six months ago Carberp's creators were flogging the banking malware exploit kit for up to $40,000.
The price bottomed out when Carberp's sales and technical support sold the source code against the creators' wishes, Group-IB head of international projects Andrey Komarov said.
With the source code in more hands than the group had anticipated, they decided to further open up the sale of the trojan.
But the sell-off was also a means to bail out on the Carberp project which was increasingly monitored by police, and to raise capital for new ventures, Trusteer fraud prevention manager Etay Maor said.
As ownership of the trojan changes hands, it will undoubtedly become available to a larger pool of criminals.
“They are going to make good use of that investment,” Maor said.
