Phorpiex botnet shuts down, source code goes up for sale

guest · Aug 27, 2021

Phorpiex botnet shuts down, source code goes up for sale
August 27, 2021
https://therecord.media/phorpiex-botnet-shuts-down-source-code-goes-up-for-sale/

The operators of the Phorpiex malware have shut down their botnet and put its source code for sale on a dark web cybercrime forum, The Record has learned.

The ad, posted earlier today by an individual previously linked to the botnet’s operation, claims that none of the malware’s two original authors are involved in running the botnet, hence the reason they decided to sell its source code.

“As I no longer work and my friend has left the biz, I’m here to offer Trik (name from coder) / Phorpiex (name fomr AV firms) source for sell [sic],” the individual said today in a forum post spotted by British security firm Cyjax.
Click to expand...

Alexey Bukhteyev, a malware reverse engineer for security firm Check Point, helped The Record today confirm the ad’s validity.

“The description of the malware is very similar to what we saw in the code,” Bukhteyev told us.
The researcher, who previously analyzed the Phorpiex malware back in 2019, said that the malware’s command and control (C&C) servers have not been active for almost two months.
Click to expand...

Buyer gets access to all the Phorpiex infected systems too
However, Bukhteyev also warns that even if the botnet C&C servers are down, once someone buys the code, they can set up new ones and hijack all the previously infected systems.

“There are still a lot of infected machines = active bots. We can’t definitely say how many, but we constantly see many hits on our gateways,” the Check Point researcher added.
Click to expand...

Log in or Sign up

Phorpiex botnet shuts down, source code goes up for sale

guest Guest

Log in or Sign up

Phorpiex botnet shuts down, source code goes up for sale

guest Guest

Useful Searches