article thumbnail

15-Year-Old Malware Proxy Network VIP72 Goes Dark

Krebs on Security

org was originally registered in 2006 to “ Corpse ,” the handle adopted by a Russian-speaking hacker who gained infamy several years prior for creating and selling an extremely sophisticated online banking trojan called A311 Death , a.k.a. Between 2003 and 2006, Corpse focused on selling and supporting his Haxdoor malware.

Malware 288
article thumbnail

Why Malware Crypting Services Deserve More Scrutiny

Krebs on Security

guru’s registration records also are hidden, yet passive domain name system (DNS) records for both cryptor[.]biz One of the domains registered in 2006 to the address unforgiven57@mail.ru The registration records for the website Cryptor[.]biz ” Crypt[.]guru’s biz and crypt[.]guru antivirusxp09[.]com). was thelib[.]ru

Malware 219