Advertisement
Home arrow ITsec News arrow Mpack malware: 160.000 computers infected
Sunday, 23 November 2008
 
 
Last week attacks
O.S.  Defs.  %
Linux  8778  71.58%
Win 2003  1950  15.90%
Win 2000  722  5.89%
Solaris 9/10  402  3.28%
FreeBSD  226  1.84%
Other  185  1.51%

Total attacks: 12263 of which 4619 single ip and 7644 mass defacements

Main Menu
Home
Digital Warfare
Geopolitics
ITsec News
ITsec Advisories
Test Drive
360°
Digital Attacks Archive
Zone-H events
Publications
Zone-H Friends/Partners
Contact Us
Search
Download Area
Zone-H forum
About this website
Login Form





Lost Password?
No account yet? Register
Visitors' Map
Mpack malware: 160.000 computers infected PDF Print E-mail
User Rating: / 5
PoorBest 
Tuesday, 15 May 2007

Experts at Panda Labs detected the new Mpack malware, a tool that can be used to download malicious software into remote computers. The principle is simple: the attacker choose a malware and use it to infect a number of computers. Last statistics  reported by Panda Labs focus on a case of 160.000 machines that were infected through this Mpack malware. Such data was obtained thanks to the “statistics component” of the tool itself.

The software is conceived to let cyber pranksters have the  full control of the attacked machines, indeed it allow to monitor data passing through them. Moreover, the attacker can group the computers affected by the malware by operating system or browser.

 The tool can be purchased for $700 on on-line forums. The price include one year’s free support.

 

According to Mr. Luis Corron  , Technical Director at Panda Labs, “Mpack offers the type of features you would expect from a legal application. For example, client updates. These updates, effectively different versions of the application, are actually the exploits needed to take advantage of the latest vulnerabilities discovered. There is normally a new one every month and they cost between $50 and $150.”

For $300 is then possible to buy DreamDownloader, a tool for downloader Trojans. It is enough to specify the URL in which he file is hosted –be it a Trojan or a worm- and the application will immediately generate an executable to download such file.

Mpack malware and DreamDownloader are complementary: the first one is used to infect computers with  malware chosen by the attacker, whereas the second one can create malware.

 


Comments Index (Total Messages: 2)
not new Written by Guest on 2007-05-15 18:28:31
  Re: not new Written by derdmx on 2007-05-28 00:40:13

Powered by a Zone-H(ified) version of AkoComment 3.0!


DISCLAIMER: Forum postings are the opinion of the posting author alone, and should not be taken as the opinion of Zone-h. The   author is entirely and solely responsible for all content that he/she uploads, posts, or otherwise transmits via the website. Zone-h is not responsible for such content. However, Zone-h shall have the right, but not the obligation, to delete, move, or edit any content that violates this agreement or is otherwise objectionable as determined by Zone-h in its sole discretion and without notice.
 
< Prev   Next >
Advertisement
 
Top! Top!