Hacker News Reader

> The group of actors is composed of 2 sellers, and 1 developer

I'm wondering what that costs and how it works. Do you send them bitcoin or whatever and they send you a binary or what? How much do you pay for it? Never really found a proper explanation how that stuff works, especially when you read about 0-day exploits.

View on HN

The article says that there's a web interface (on the open internet) where you can register and login. This interface allows you to download a build of the malware (with your customer ID embedded in the binary, presumably). The malware sends the stolen data to the server, with the customer ID, and it shows up on that customer's dashboard for them to download. The article doesn't say how payment works, but it's a safe bet to say that they take cryptocurrency. It all seems quite seamless, which makes me wonder how many customers they have, and how popular it is to set up shop stealing information with other people's software.

...sounds like a "SaaS for Malware"? Turn key hosted malware?

More common than you think, a lot of RAT malware uses an online panel too. Often self-hosted but I've seen a few solutions that host it for you.

I remember some sellers were offering turnkey modified ZeuS back in the day.

Reply on news.ycombinator.com