Hacking
Criminals are employing marketing and sales techniques to address the cyber-crime economy

Cyber-crooks turn to managed services

Easy-to-use crime-ware toolkits on the rise

Written by Clement James

We are seeing the rise of a new business model in the crime-ware toolkit market

Yuval Ben-Itzhak Finjan

Security experts have warned that criminals are increasingly turning to a managed services model to avoid having to deal with the technical challenges of internet crime.

As with mainstream software providers, the creators and owners of crime-ware toolkits provide 'customers' with update mechanisms, along with sophisticated anti-forensic attack techniques.

They also offer the ability to manage and monitor malicious code affiliation networks.

Researchers at Finjan's Malicious Code Research Center warned that this model creates a new level of crime-ware by supplying an easy-to-use toolkit.

"We are seeing the rise of a new business model in the crime-ware toolkit market," said Yuval Ben-Itzhak, chief technology officer at Finjan.

"Cyber-criminals and organisations are getting better at protecting themselves from law enforcement by using crime-ware services, especially since the operator does not necessarily conduct the criminal activities related to the data being compromised but only provides the infrastructure for it."

Cyber-criminals can now generate more targeted infections and deliver specialised crime-ware for specific geographical regions, according to Ben-Itzhak.

"Criminals are employing marketing and sales techniques to address the cyber-crime economy and ensure that the market they are after gets the proper localised 'product'," he said.

Finjan foresees the next phase in the commercialisation process as creating a service to get straight to the stolen data by providing the victim's data tailored to the criminal intention.

Having such a service eliminates the need for attackers to even have to log-in to manage an attacker profile on a crime-ware toolkit platform.

Further reading

Security expert slams PCI auditing

PCI compliance does not guarantee security   More...

Big names fail VB100 antivirus test

McAfee and Trend Micro 'named and shamed'   More...

USB malware on the rise

Memory sticks identified as fast growing attack vector   More...

Teenager admits to million-PC botnet scam

18 year-old unlikely to get jail senence   More...

Related articles

Hackers turn to new genre of evasive attacks

Finjan report warns of malicious code 'affiliation networks'   More...

Hackers unleash 'insidious' crimeware attack

Trusted websites turned into traps   More...

'Wave of Trojans' goes on the rampage

Corporate IT managers urged to be on their guard   More...

Hackers set up stolen FTP account trading floor

Database discovered containing more than 8,700 harvested FTP account details   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement