Уровень 0 · материалов: 3
В кластер входят документы о развитии и структуре масштабных вредоносных сетей и групп, нацеленных на системное проникновение в финансовые или компьютерные инфраструктуры.
Общие признаки: организованная киберпреступность, использование ботнетов, атаки на банковские системы, переход к профессиональным моделям управления
Группа выше: Киберпреступники: мотивация, сети и раскрытие
Смысл: The main idea is that the ZeuS botnet has transitioned into a professional 'crime-as-a-service' model, offering modular, paid upgrades that allow criminals to bypass sophisticated banking security and maintain full remote control over millions of infected computers.
The ZeuS botnet has become a highly profitable and modular toolkit for cybercriminals, enabling them to bypass two-factor authentication and steal massive sums from online banking systems.
Смысл: The main idea is that the Downadup malware evolved from an aggressively spreading worm into a stealthy, decentralized botnet (W32.Downadup.C) to ensure long-term survival and control over millions of infected systems.
The Downadup worm evolved into version C, dropping its spreading mechanism to become a stealthier, P2P-driven botnet with over 2 million infected hosts.
Смысл: The main idea is that the Carbanak attack represented a paradigm shift in cybercrime, moving from impulsive theft to a highly organized, patient, and sophisticated corporate-style infiltration of the global banking system.
The Carbanak cybercriminal group stole hundreds of millions of dollars from over 100 banks worldwide by using patient surveillance and internal system manipulation.