Dark Web marketplace 'In The Box' specially for mobile malware that surfaced online is the largest mobile malware marketplace identified by Resecurity serving cybercriminals since Jan 2020.
Initially the actor behind this website offer its services to cybercriminals privately but after getting enough exposure they scaled it to a fully productized automated marketplace.
"The automation allows other bad actors to create orders to receive the most up to date webinject for further implementation into mobile malware. For those using proprietary (or so called “private”), mobile malware is not widely available for sale or rent, because of this “InTheBox” is offering customized development solutions. As of today, the most widely malware families supporting webinjects are - Alien, Cerberus, Ermac, Hydra, Octopus (aka “Octo”), Poison, and MetaDroid." Resecurity wrote.
'In The Box' is the new marketplace that provides unique tools and Web-inject for sale. Web-inject is like man in browser attack and extract sensitive information, Web-injectcan be integreted into mobile malware for getting banking credentials, social media login details, payment systems, email credentials, etc.
According to hackread "Currently, this marketplace has more than 1,849 malicious tools for sale, specifically designed to target major e-commerce and financial institutions, payment systems, social media firms, and online retailers in at least 45 countries.".
No comments:
Post a Comment