article thumbnail

15-Year-Old Malware Proxy Network VIP72 Goes Dark

Krebs on Security

org was originally registered in 2006 to “ Corpse ,” the handle adopted by a Russian-speaking hacker who gained infamy several years prior for creating and selling an extremely sophisticated online banking trojan called A311 Death , a.k.a. Between 2003 and 2006, Corpse focused on selling and supporting his Haxdoor malware.

Malware 294
article thumbnail

Why Malware Crypting Services Deserve More Scrutiny

Krebs on Security

But Intel 471 finds that after his critical review of VIP Crypt, Kerens did not post publicly on Exploit again for another four years until October 2016, when they suddenly began advertising Cryptor[.]biz. One of the domains registered in 2006 to the address unforgiven57@mail.ru antivirusxp09[.]com). was thelib[.]ru

Malware 226