Slashdot Mirror

← Back to Stories (view on slashdot.org)

Almost 100 Arrested In Worldwide Swoop On Blackshades Malware

Posted by samzenpus on from the shut-it-down dept.

MattSparkes (950531) writes "Law enforcement around the world has teamed-up to arrest 97 for buying/using Blackshades malware, which can remotely seize control of a victim's computer, access documents, record keystrokes and even activate their webcam to take surreptitious pictures and video. It is also able to encrypt files in order to extract a ransom for their release. Blackshades RAT is a commercial product costing less than $200 which was marketed as a tool to test network security. However, it is widely used by hackers and was even said by the Electronic Frontier Foundation to have been used against Syrian activists by the government in 2012."

46 of 87 comments (clear)

  1. it is actually illegal by ganjadude · · Score: 3, Interesting

    to buy and sell a piece of software? what one does with it is obviously a different story, but I didnt think there was anything illegal against buying and selling a piece of software. In true /. fashion, I did not RTFA

    --
    have you seen my sig? there are many others like it but none that are the same
    1. Re:it is actually illegal by ggraham412 · · Score: 1

      I did read the article and was wondering the same thing.

    2. Re:it is actually illegal by Anonymous Coward · · Score: 1

      Why would software be different from hardware? Take cell phone jammers. Illegal. What if you made an app for iOS that, when activated, jammed all the cell signals within a 500' radius? Is that app illegal? Is the app legal, but the phones illegal once the app is installed? Maybe the phones are illegal only when the app is running, but not when it isn't? Maybe only when the app is in RAM but not sitting on flash? If I take my SD card out, is the phone legal now?

    3. Re:it is actually illegal by ganjadude · · Score: 5, Insightful

      ahh so its like bongs, if its being sold as a water pipe (network testing tool) its ok, if its being sold as a bong( hacking tool) its not

      --
      have you seen my sig? there are many others like it but none that are the same
    4. Re:it is actually illegal by jeffmeden · · Score: 1

      What if you made an app for iOS that, when activated, jammed all the cell signals within a 500' radius?[...] If I take my SD card out, is the phone legal now?

      Nope, if you have an SD card to take out, you're using a KIRF iPhone and it was illegal as soon as it was imported to the US, and always will be. For a slightly different reason though.

    5. Re:it is actually illegal by spire3661 · · Score: 1

      Cell phone jammers are illegal to DEPLOY, not illegal to own.

      --
      Good-bye
    6. Re:it is actually illegal by QuasiSteve · · Score: 2

      If you read the article.. then could you point to the exact article that states that selling the software was illegal?

      All I'm reading is raids at people who used the software.

      Though I wouldn't blame them for going after the authors/sellers, given that it's got a template "we encrypted your files, send payment here for decryption key" letter included. That rather sways things well away from the "it's just a network security testing tool" suggestion.

    7. Re:it is actually illegal by Charliemopps · · Score: 4, Informative

      During the course of a worldwide investigation, creators, sellers and users of BlackShades malware were targeted by judicial and law enforcement authorities in 16 different countries.

      http://www.eurojust.europa.eu/...

      So they didn't go after people that bought it. They went after the people that wrote it, sold it or used it. If you bought it but didn't use it, they aren't going after you... yet. I suspect that what happened here was the authors put a backdoor into their backdoor software... which the users should have expected... lol. When they got raided, either law enforcement found it or they made a deal with the authors.

    8. Re:it is actually illegal by Anonymous Coward · · Score: 1

      They're illegal to market, sell or use:
      http://transition.fcc.gov/eb/jammerenforcement/jamfaq.pdf
      But you're right, if you own one as long as you don't use it it seems ok to possess.

    9. Re:it is actually illegal by QuasiSteve · · Score: 1

      Ha, there it is - thanks for the follow-up!

    10. Re:it is actually illegal by Redmancometh · · Score: 1

      An online friend of mine in Belgium has been arrested in the last week. We do not know exactly why he was arrested, but it appears that this is the reason. We know he purchased this piece of software, and we are fairly certain he did not use it..I think he wanted to pull it apart.

      Very frightening stuff indeed.

    11. Re:it is actually illegal by chuckugly · · Score: 2

      I did read the article and was wondering the same thing.

      The National Crime Agency (NCA) also said in a statement that it is aware of more people in the UK who bought the software but are yet to use it. It is working to warn them that "they are now known to the agency" and that "any movement into criminality will result in further action".

    12. Re:it is actually illegal by chuckugly · · Score: 1

      Cell phone jammers are legal, jamming cell phones is illegal. There is a difference.

    13. Re:it is actually illegal by ganjadude · · Score: 1

      keep us updated on your friend, Id love to know how everything goes down. Hopefully they arent to hard on him

      --
      have you seen my sig? there are many others like it but none that are the same
    14. Re:it is actually illegal by Dishevel · · Score: 1

      Kosovo?

      --
      Why is it so hard to only have politicians for a few years, then have them go away?
    15. Re:it is actually illegal by ganjadude · · Score: 1

      cared enough to make a post....

      --
      have you seen my sig? there are many others like it but none that are the same
    16. Re:it is actually illegal by Anonymous Coward · · Score: 1

      It's more like like guns. OK for defense (IE Pen testing) not ok for random drive-bys (Hacking)...

    17. Re:it is actually illegal by Jack+Griffin · · Score: 1

      Yeah, he just wanted to pull it apart to figure out how he could use it to cure cancer and save the children. Protip: play with fire, get burnt.

  2. NSA by eedwardsjr · · Score: 3, Funny

    "For internal use only"

    1. Re:NSA by ThaumaTechnician · · Score: 1

      "Shakes fist"... Dang, beat me to it!

    2. Re:NSA by Anonymous Coward · · Score: 1

      When are they going to arrest the NSA, GCHQ, or the other nation-state adversaries doing this exact same thing?

      Do we need to catch them and report them to the police first?

      People in glass houses shouldn't throw stones.

      Also, don't build glass houses. Or throw stones.

  3. Today's Best Slashvertisement? by mythosaz · · Score: 3, Insightful

    How many of you thought, "Hey, only $200...hmmmm?"

    Be honest.

    I wonder what this particular Slashvertisement cost to buy?

    1. Re:Today's Best Slashvertisement? by tiberus · · Score: 1

      Chances are you'd get a faster response from Google.

    2. Re:Today's Best Slashvertisement? by war4peace · · Score: 1

      Your tinfoil hat's width would stop an ICBM.

      --
      ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
    3. Re:Today's Best Slashvertisement? by InsultsByThePound · · Score: 3, Informative

      I thought, "I bet I can google this and get it for free." I was right.

    4. Re:Today's Best Slashvertisement? by Anonymous Coward · · Score: 1

      Hard enough to trust malware that you paid for, how trustworthy do you think a "free" copy that you managed to find will be?

    5. Re:Today's Best Slashvertisement? by mspohr · · Score: 1

      How do you "trust" any malware?

      --
      I don't read your sig. Why are you reading mine?
    6. Re:Today's Best Slashvertisement? by canadiannomad · · Score: 1

      You trust it on a virtual machine, on a honey pot host, in a virtual network, that is disconnected from any other system...

      --
      Hmm, the humour and sarcasm seem to have been be lost on you.
    7. Re:Today's Best Slashvertisement? by chuckugly · · Score: 1

      I looked for it. If I could trust it (hahahahahaha) it would be really useful for remotely fixing computers for all the people who expect me to fix their computers. But as I was digging around I decided anything that hard to buy isn't going to be trustworthy. I'll stick to log me in.

    8. Re:Today's Best Slashvertisement? by JazzLad · · Score: 2

      Or any computer at the local Best Buy ...

      --
      "If you have nothing to hide, you have nothing to fear." - Every fascist, ever
  4. Windows is not the only OS out there by ruir · · Score: 2

    So please, write Windows computers and not just computers. Thank you.

    1. Re:Windows is not the only OS out there by cdrudge · · Score: 4, Funny

      Anyone who you would want to stalk, read their dirty emails, and see naked via a spycam is using Windows. Or possibly a Mac. I REALLY don't think you want to see the average Linux user naked and/or blackmail them for dirty pictures.

    2. Re:Windows is not the only OS out there by spire3661 · · Score: 1

      Even counting only OEM commercial products, the Unix variants in my house far outnumber the Windows boxes.

      --
      Good-bye
    3. Re:Windows is not the only OS out there by ArcadeMan · · Score: 1

      Don't you know that on Slashdot, you can attack Mac OS X, iOS, Linux and Android, but you can't say a word about the holy gaming-OS?

      --
      Get free satoshi (Bitcoin) and Dogecoins
    4. Re:Windows is not the only OS out there by HiThere · · Score: 1

      No. Please write "MSWindows computers". Microsoft does not own the trademark on windows in English speaking countries. It is a common word in descriptive use and is therefore not eligible for trademark protection.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    5. Re:Windows is not the only OS out there by haploc · · Score: 1

      I REALLY don't think you want to see the average Linux user naked and/or blackmail them for dirty pictures.

      One of the few examples where 'security through obscurity' does work.

  5. What? by no-body · · Score: 1

    Only 100 - that can't be. NSA is not that understaffed!

  6. Xzibit named as mastermind behind scheme by Dogtanian · · Score: 1

    I suspect that what happened here was the authors put a backdoor into their backdoor software...

    Yo dawg, I herd you like backdoors, so we put a backdoor in your backdoor so you can.... er, sod it, you can probably guess the rest yourselves. :-/

    --
    "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
  7. Any different? by duke_cheetah2003 · · Score: 1

    How is this any different from something like GoToMyPc.COM or Join.Me ????

    Should I be worried now that I use join.me to invite friends to see what I'm doing, or use it to help friends having trouble?

    A piece of software's intended functions should not be viewed as good or bad, it's simply a tool. You can club some one over the head with a monkey wrench and kill them. Does that mean this tool has no legitimate uses?

    "Shall the clay say to him that fashioneth it, What makest thou?"

    1. Re:Any different? by Jack+Griffin · · Score: 1

      Because Join.Me instalsl itself silently on a remote host, uses your webcam without your permission, encrypts your files without you knowing then sends you a ransom note asking for money. Good comparison Einstein. Please tell, what legitimate legal purpose do you foolishly believe this software could possibly serve?

  8. Re:BackOrifice anyone? by duke_cheetah2003 · · Score: 1

    As a teen, I remember actually getting some bozo on IRC to install BO on his PC for me. Social engineering is so fun. Dem were the days.

  9. Elimination competition by citizenr · · Score: 1

    raids sponsored by Vupen :)

    --
    Who logs in to gdm? Not I, said the duck.
  10. A hair dresser needs a license to cut hair by Stan92057 · · Score: 1

    A hair dresser needs a license to cut hair But people who write this kinda software need nothing??? doesn't make any since to me. This kinda software has zero business in the public domain stop giving the criminals tools for free. And that is IMO

    --
    Jack of all trades,master of none
  11. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  12. Re:BackOrifice anyone? by gnasher719 · · Score: 1

    As a teen, I remember actually getting some bozo on IRC to install BO on his PC for me. Social engineering is so fun. Dem were the days.

    That's called "dehumanizing the victim". It wasn't a human being, it was a bozo, so it was alright.

  13. Victim's computer malware? by lippydude · · Score: 1

    "Law enforcement around the world has teamed-up to arrest 97 for buying/using Blackshades malware, which can remotely seize control of a victim's computer"

    What Operating System does this malware run on, or aren't we allowed to mention Microsoft Windows. ref