Hacker sold 'Zero-day vulnerability' in Vista

The underworld is selling a zero-day flaw in Microsoft's Windows Vista operating system for $ 50,000 each, security firm Trend Micro warned.

According to Trend Micro, the Windows Vista vulnerability is just one of many zero-day vulnerabilities being publicly available on the black market in the current auction style.

A product "package" consists of two parts: "weak" code, software bugs and code that can be used to attack that weakness. Their selling prices range from US $ 20,000 to US $ 30,000, depending on the popularity of the software and the reliability of the attack code.

New fat item

Source: national.com Trend Micro's findings have shown the truly lucrative value of information about software vulnerabilities. Once again, it confirms the existence of an entire black market world that is active, specializing in trading, exchanging unpatched holes.

Since December last year, Kaspersky Lab's experts have found evidence that the attack code used in the WMF hack (Windows Metafile) was sold by a Russian hacker group for $ 4,000 a while ago.

However, at this point, that black market is really booming and at a certain stage, its value may surpass even the legitimate security software market, Trend Micro warns. " I think the malware industry will make more money than our security block ."

Inevitable trend

According to Trend Micro, the black market shifted to trading zero-day vulnerabilities is inevitable, when personal information is stolen (serving phishing attacks) and virtual assets (hacked from online game players). ) has become somewhat saturated.

Depending on the bank brand and the level of detail of user information (name, date of birth, permanent address, social insurance card number), the price may vary by region. A custom Trojan can steal online account information for sale between $ 1,000 and $ 5,000, while malware establishes a more expensive botnet computer network, from $ 5,000-20000.

Credit card numbers with valid PINs are sold for $ 500 per card, while a driver's license costs $ 150, a $ 150 birth certificate, a social security card with $ 100 and a credit card number with code. security and expiration date ranges from 7-25 USD.

Trong Cam