Cloud computing crimeware means networks of zombie machines can be hired to steal online banking details for as little as US$299 per month.
Fraud-as-a-service is opening up computer crime to people with no technical expertise warned Uri Rivner, head of new technology at security company RSA.
Speaking at the RSA Conference 2008 in London, Rivner laid the pricing bare, revealing how fraudsters offered botnet networks as a subscription service with patching and upgrades thrown in.
These networks could be tailored to infect other users' computers with malware, or to launch massive distributed denial of service attacks designed to take down computer systems.
Rivner said: "This is the danger with making this technology open to the mass market.
"Anybody can become a high-end online fraudster."
Malware is also being sold for both the high end and budget markets, from the US$1,000 Zeus Trojan--a sophisticated Trojan that harvests data and entrenches itself in the system--down to US$350 for the Limbo Trojan.
Rivner said the fraudsters usually split their roles between the "harvester", the hacker who writes and deploys the malware to steal the details, and a "cash-out" criminal who will handle the money.
Cash-out fraudsters use "money mules", who are often recruited unwittingly as "finance officers" working from home, to have the dirty money laundered through their account.
Nick Heath of Silicon.com reported from London.
Play video
» Ultimate virtualization blade
Criminals Invented Cloud Computing
I hate to tell you this, it wasn't Amazon, IBM or even Sun who invented cloud computing. It was criminal technologists, mostly from eastern Europe who did. Looking back to the late 90's and the use of decentralized "warez" darknets. These original private "clouds" are the first true cloud computing infrastructures seen in the wild. Even way back then the criminal syndicates had developed "service oriented architectures" and federated id systems including advanced encryption. It has taken more then 10 years before we actually started to see this type of sophisticated decentralization to start being adopted by traditional enterprises. Full Response > www.elasticvapor.com...
Posted by Reuven on Monday, November 03 2008 10:30 AM