Prices fall, services rise in Malware-as-a-Service market

Any non-professional can buy or rent all the tools needed to build the malware, distribute it and then siphon credit card and banking data and other personal informatio

Prices are falling and the number of services is increasing as developers in the online underground compete fiercely for criminals looking to purchase botnets and other tools to mount cyberattacks.

The trends in the so-called Malware-as-a-Service market (MaaS) reflect a maturing business in which any non-professional can buy or rent all the tools needed to build the malware, distribute it and then siphon credit card and banking data and other personal information from compromised PCs. Developers even offer software consoles that provide a full view of a botnet and all its nodes.

"You don't have to be part of a hacking collective to be an effective hacker and someone who is effective at monetizing his efforts in this alluring way," said Grayson Milbourne, security intelligence director for Webroot. "It is rather easy and people are making a lot of money, so we expect [tools] to become more available and less expensive."

Because of competition among suppliers, prices have been falling rapidly. Since January, Webroot has seen prices starting for a U.S. botnet of 1,000 computers fall from $200 to $120. Today, a person can buy a 10,000-computer botnet for $1,000.

[Also see: Custom design growing in malware market]

Botnets located in the U.S. fetch the highest prices because the victims tend to have more money in PayPal and bank accounts, as well as credit cards with higher maximum spending limits. By comparison, a 1,000-host botnet in the European Union costs $50, while the same number in Germany, Canada or the U.K. cost $80, according to Webroot.

With the demand for services rising, suppliers are expanding their portfolios. A more recent service is converting malware-infected computers into anonymization proxies that cybercriminals can use to cover their Web activities.

One newly launched service advertised as ProxyBuy provides access to thousands of hosts that have been converted to SOCKS Servers. SOCKS, which stands for SOCKet Secure, is an Internet protocol that routes network packets through a proxy server.

Prices vary depending on the number of servers. For example, a criminal can buy 1,400-1,500 SOCKS servers for $30. A popular tactic of cybercriminals is to chain numerous servers together to cover their tracks.

Malware-as-a-service operations have been around since the early 2000s, but they have really started taken off since 2006. In general, the services are being used for spamming, launching denial-of-service attacks, harvesting emails and stealing credentials for banking accounts and other Web services.

Read more about malware/cybercrime in CSOonline's Malware/Cybercrime section.

Tags: Webroot, Data Protection | Malware, applications, legal, software, data protection, malware-as-a-service, cybercrime

Heartbleed panic drives flood of enquiries to Symantec's Melbourne CA

READ THIS ARTICLE
DO NOT SHOW THIS BOX AGAIN [ x ]
Comments are now closed.
CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Security That Fits

Improve the effectiveness of your security or get unique network threat discovery and remediation

Latest Jobs
Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.