News
Amit Klein, Trusteer’s CTO: Zeus/SpyEye Trojan webinjects for sale on the undergroundmarket
November 2011 by Amit Klein, CTO, Trusteer
Webinjects are malware configuration directives that are used to inject rogue content in the web pages of bank websites to steal confidential information from the institution’s customers.
Webinjects are actually being offered for sale on many open internet forums and developers are earning a decent income from selling the Zeus/SpyEye webinjects service to an increasingly diverse customer base.
From the advertisements we’ve seen there are multiple targets, including British, Canadian, American, and German banks.
Worryingly the prices are pretty reasonable. According to the website advertisements:
One webinject pack $60
UK webinject pack $800
US webinject pack $740
Updating / modification of webinjects $20 each
On one of the forums Trusteer even found an advertisement, for the large pack of webinjects (19mb), being sold for just $15-$20.
