📜 ⬆️ ⬇️

The network has flowed Citadel

Three days ago, a link to Citadel 1.3.4.5 appeared on one of the Spanish forums.

image

A branch from the ZeuS line, named Citadel and advertised in several fully closed hacker forums, is another example of malware development in the form of a network service.
For those who are not familiar with this Malvar, here are some quotes:
')
Citadel is a social platform for serving hacker clients. There has never been anything like Citadel CRM Store, built on the model of the best escort systems for ordinary commercial products:

- bug reports and technical support;
- requests for the creation of additional modules and applications (public or private requests);
-voting for new ideas, offering their price for the development / improvement of the new module, the possibility of partial prepayment for the motivation of developers;
the possibility of commenting on any application and sending a personal message to another social network member;
- monitoring all stages of development of the new module, developers update the current status and the time remaining until the end of development;
-comfortable jabber-notifications about new users and fresh messages, or new modules / applications.

The Citadel basic package (bot designer and botnet control panel) is sold for $ 2,399, plus a $ 125 monthly "rent", but the most innovative modules are sold separately. For example, $ 395 is a module that allows you to subscribe to automatic software updates, to instantly bypass the latest updates of anti-virus databases. Updates are distributed through jabber, and each update costs an additional $ 15. By paying this amount, you can be sure that after the release of fresh anti-virus databases, Trojans on users' computers are able to update faster than the user himself updates the anti-virus databases.

Actually link for those who want to study (the builder is not working!):
www.sendspace.com/file/4ug8rg
pass: Citadel

Source: https://habr.com/ru/post/155845/


All Articles