StopGeorgia and StopThem forum administrators are likely connected to ZeuS and SpyEye trojans

The Zloy team is one of the organized criminal hacker crews involved in selling a wide variety of malware including the ZeuS trojan. Their members have included Terminator, Forall, PrikOL, Lev, System, Venomix, !lusion. They also maintain their own dedicated forum at http://forum.zloy.bz which includes a new piece of malware in competition with ZeuS called Spy Eye.

Figure 1: screenshot of SpyEye user interface by MarketIntelligence

Spy Eye is a financial trojan designed to compete with ZeuS in the lucrative crimeware market. It currently sells for $500 WMZ, which is the Web Money equivalent of $500 U.S. Dollars. It’s a very sophisticated and stable application, coded in C++, and operates invisibly on the infected host machine (i.e., not viewable in processes, autorun, or hidden files).

This is an abstract version. The complete article is available to IntelFusion FLASH Traffic subscribers.

Comments are closed.