New Trojan Spyeye Vying With Zeus

Botnet construction kit ZeuS, widely used among online crooks, is confronting challenge from a new computer Trojan, SpyEye. Based on an analysis by Security Company Symantec, it is evident that SpyEye's recent version, apparently having its origin in Russia, as well contains an option for removing ZeuS-infected bots come upon from contaminated computers.

Say the Symantec researchers that the more novel and relatively more costly SpyEye toolkit for botnets is getting increasingly popular since bot-herders are looking for a new means to build their networks more conveniently and successfully.

They state that selling for $500, the SpyEye kit is aiming to capture a large market share of the ZeuS toolkit. Being introduced fresh, the SpyEye activity isn't immense as yet. Nevertheless, with the passage of time as well as with the development rate that's observed of this crimeware kit, SpyEye is likely to become a future rival of the top crimeware kit, the researchers added.

They elucidate that SpyEye resembles ZeuS that typically disseminated malware and built a most big botnet online. Similar to ZeuS, SpyEye presents wannabe attackers, construction software, which can create a front end medium that's Web-based and executed with a Trojan to operate a command-and-control center after an army of zombies has been accumulated.

Other features of the SpyEye toolkit include keylogging capability, encryption functions, a system to auto-fill credit card programs, and everyday e-mail backup. The toolkit further offers methods of custom infection to chase machines located across various countries.

In the meantime, experts note that rivalry among crimeware gangs isn't something new. During 2007, the Srizbi botnet malware competed to uninstall the Storm worm's spam malware. Likewise, Netsky, MyDoom and Beagle crimeware toolkits also, at one time, got absorbed in prolonged battles for bots. Now, contending phishing groups too appear to be engaged in this practice.

Predicts Symantec that if SpyEye picks up to effective use, it may knock off the ZeuS bot network as well as result in reprisal from those behind the creation of the crimeware kit associated with Trojan ZeuS. This can further result in yet another battle for bots, the security firm adds.

Related article: New Zealand Releases Code To Reduce Spam

» SPAMfighter News - 2/17/2010