anAfrican
12-16-2006, 07:37 PM
Vista Zero-Day Exploit For Sale (http://it.slashdot.org/it/06/12/16/196213.shtml) (slashdot.org)
Posted by kdawson on Saturday December 16, @04:02PM
from the crack-bazaar dept.
Snakepit Bit writes:
"Underground hackers are hawking a zero-day exploit for Windows Vista at $50,000 a pop (http://www.eweek.com/article2/0,1895,2073611,00.asp) (eweek.com), according to computer security researchers at Trend Micro. The Windows Vista exploit, which has not been independently verified, was just one of many zero-days available for sale at an auction-style marketplace infiltrated by the anti-virus vendor. Prices for exploits for unpatched code execution flaws are in the $20,000 to $30,000 range. Bots and Trojan downloaders that typically hijack Windows machines for use in botnets were being sold for about $5,000."
From the article:
"According to [Trend Micro CTO Raimund] Genes, the typical price of a destructive exploit has increased dramatically, driving an underground market that could exceed the value of the legitimate security software business. 'I think the malware industry is making more money than the anti-malware industry,' Genes said."
(DISCLAIMER: I ain't saying nothing about nothing; just passing along some info. Like most everything else that comes out in today's media, regardless of form, take it with a grain of salt: it might mean something, it might be about stirring up an attitude to enhance someone's "bottom line", it might be a hoax. <shrug> "You make the call!")
Posted by kdawson on Saturday December 16, @04:02PM
from the crack-bazaar dept.
Snakepit Bit writes:
"Underground hackers are hawking a zero-day exploit for Windows Vista at $50,000 a pop (http://www.eweek.com/article2/0,1895,2073611,00.asp) (eweek.com), according to computer security researchers at Trend Micro. The Windows Vista exploit, which has not been independently verified, was just one of many zero-days available for sale at an auction-style marketplace infiltrated by the anti-virus vendor. Prices for exploits for unpatched code execution flaws are in the $20,000 to $30,000 range. Bots and Trojan downloaders that typically hijack Windows machines for use in botnets were being sold for about $5,000."
From the article:
"According to [Trend Micro CTO Raimund] Genes, the typical price of a destructive exploit has increased dramatically, driving an underground market that could exceed the value of the legitimate security software business. 'I think the malware industry is making more money than the anti-malware industry,' Genes said."
(DISCLAIMER: I ain't saying nothing about nothing; just passing along some info. Like most everything else that comes out in today's media, regardless of form, take it with a grain of salt: it might mean something, it might be about stirring up an attitude to enhance someone's "bottom line", it might be a hoax. <shrug> "You make the call!")