Slashdot Mirror

← Back to Stories (view on slashdot.org)

Android iBanking Malware Still Fetches $5,000

Posted by Unknown on from the malware-for-the-rich-and-famous dept.

itwbennett (1594911) writes "Symantec and RSA published details on their blogs on Tuesday about the iBanking Android program, which is being used by two Eastern European cybercrime groups to intercept one-time SMS passcodes used for logging into bank accounts. IBanking's source code was leaked in February, which should have caused its price to drop. But its developer has continued to develop iBanking and provide support, and the malware is still commanding $5,000 per copy, one of the highest prices seen for a type of malware, according to research from Symantec."

6 of 25 comments (clear)

  1. Price and volume by jamesl · · Score: 2

    IBanking sells for around $5,000 or for a cut of the proceeds from theft it facilitates, Symantec wrote.

    Like all these stories, $5,000 may be the "sticker" or asking price. How many sold at this price or at any price is the important metric.

    1. Re:Price and volume by LordLimecat · · Score: 2

      SharePoint plugins

      Whoah now, even criminals have standards.

  2. Re:download free by jbmartin6 · · Score: 2

    This is why you should never give out your IP address over the Internet.

    --
    This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
  3. Source or no souce, if you can't use it... by Opportunist · · Score: 4, Interesting

    I cannot speak for this special case, since I lack the detailed info, but in general, those 5k bucks usually give you more than just the program. Such groups usually sell the whole package, including servers, server software, malware and for a little more money also a spam service to carpet bomb mail addresses with the malware spam.

    In other words, you needn't be in any way apt with computers to commit "cybercrimes" anymore. You can get the "for dummies" package, including detailed step by step instructions how to use it.

    Why those groups don't simply do it themselves and sell it instead? First, it's more profitable. And second, it's legal (for them at least, might be different in your country) to sell the software, but not to use it.

    I don't know why, but it does start to remind me of drug cartels.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  4. actual write-up on the iBanking bot by Aryeh+Goretsky · · Score: 2

    Hello,

    The ITWorld article didn't mention it, so here's a link to the actual write-up on the bot, which is actually called Android/Spy.Agent.AF: Facebook Webinject Leads to iBanking Mobile Bot.

    Regards,

    Aryeh Goretsky

    --
    Dexter is a good dog.
  5. Apple isn't immune by tepples · · Score: 2

    It's a social engineering exploit to get people to install an executable from a pop-up advertisement. OS X has exactly the same vulnerability unless you set Gatekeeper to "Mac App Store only".