Live data from Hacker News

The Russian underground economy has democratized cybercrime

arstechnica.com

11–20 of 48 posts

Re: The Russian underground economy has democratized cybercrime

#11

This isn't just a "Russian" thing.

So, we take you at face value, with no citations or other authority? What if you're one of the Russian cybercriminals? Or that hacker that the Georgian CERT unmasked? So, +1 for vaguely menacing vagueness.

The OP article has no citations or sources either, do you take it at face value?

Edit: Another commenter linked to the original report.

Re: The Russian underground economy has democratized cybercrime

#12
Nope all over this article.

>If you want to buy a botnet, it'll cost you somewhere in the region of $700

Very vague.

>ZeuS source code: $200-$500

Nope, total bullshit. It is widely available. [1]

>SOCKS bot (to get around firewalls): $100

Nope. "Socks bot" refers to the ability to convert an infected computer into a SOCKSv5 proxy

>Unintelligent exploit bundle: $25

This refers to exploit packs, which is obfuscated software sold on these boards that contain unpatched 0day exploits. Exploit packs are worthless after a week, unless updated since all the vulnerabilities (apart from Java[2]). They're available for free.

[1]http://www.multiupload.co.uk/P8QUNF4YJN

[2]http://www.theregister.co.uk/2012/08/30/oracle_knew_about_fl...

Re: The Russian underground economy has democratized cybercrime

#13
post #9

I'd be willing to fork up the $150 to see if they could hack into my own gmail account. Seems like cheap penetration testing. Pointing them toward myself should be legal as well. So who do I pay? In fact Google should be paying them to hack honeypotted accounts and see what they try.

A year ago a "friend" of me hired a russian hacker, just for a joke, and he hacked my gmail, twitter and facebook accounts. And the passwords were random 10 caracters or something like that. He hired the hacker in free-lance.ru

Re: The Russian underground economy has democratized cybercrime

#14
post #12

Nope all over this article. >If you want to buy a botnet, it'll cost you somewhere in the region of $700 Very vague. >ZeuS source code: $200-$500 Nope, total bullshit. It is widely available. [1] >SOCKS bot (to get around firewalls): $100 Nope. "Socks bot" refers to the ability to convert an infected computer into a SOCKSv5 proxy >Unintelligent exploit bundle: $25 This refers to exploit packs, which is obfuscated sof…

Also, just as an additional note: it is not just Russia doing this. Countries where extradition is not an option generally tend to have the largest amount of cyber crime. The list includes China[1], Germany[4], Russia, Japan[3] and France[2]. People in these countries generally target Americans, since USA has the second largest amount of internet users (245,203,319) [5] and has one of the highest GDP in the world[6]. Recently a security firm investigated a Facebook virus called KoobFace and found out its Russian authors, however, they were unable to prosecute them due to Russian Laws[7]

[1]http://www.gov.cn/english/laws/2005-09/22/content_68710.htm

[2]http://www.legifrance.gouv.fr/content/download/1958/13719/ve...

[3]http://www.moj.go.jp/ENGLISH/information/loe-01.html

[4]http://www.gesetze-im-internet.de/englisch_gg/englisch_gg.ht...

[5]http://www.internetworldstats.com/list2.htm

[6]http://exploredia.com/list-of-countries-by-gdp-2012/

[7]http://nakedsecurity.sophos.com/koobface/

Re: The Russian underground economy has democratized cybercrime

#15
post #7

This isn't just a "Russian" thing.

I'd love to learn about examples of particular socio-economic reasons in particular countries for cybercrime being more mature than IT business.

Hmm, did I understand correctly that you think that in Russia cybercrime is more mature than IT business?

Re: The Russian underground economy has democratized cybercrime

#16
post #9

I'd be willing to fork up the $150 to see if they could hack into my own gmail account. Seems like cheap penetration testing. Pointing them toward myself should be legal as well. So who do I pay? In fact Google should be paying them to hack honeypotted accounts and see what they try.

A year ago a "friend" of me hired a russian hacker, just for a joke, and he hacked my gmail, twitter and facebook accounts. And the passwords were random 10 caracters or something like that. He hired the hacker in free-lance.ru

Any more information to this story? Do you know how they did it?

Re: The Russian underground economy has democratized cybercrime

#17
post #9

I'd be willing to fork up the $150 to see if they could hack into my own gmail account. Seems like cheap penetration testing. Pointing them toward myself should be legal as well. So who do I pay? In fact Google should be paying them to hack honeypotted accounts and see what they try.

A year ago a "friend" of me hired a russian hacker, just for a joke, and he hacked my gmail, twitter and facebook accounts. And the passwords were random 10 caracters or something like that. He hired the hacker in free-lance.ru

[deleted]

Re: The Russian underground economy has democratized cybercrime

#18
post #14
post #12

Nope all over this article. >If you want to buy a botnet, it'll cost you somewhere in the region of $700 Very vague. >ZeuS source code: $200-$500 Nope, total bullshit. It is widely available. [1] >SOCKS bot (to get around firewalls): $100 Nope. "Socks bot" refers to the ability to convert an infected computer into a SOCKSv5 proxy >Unintelligent exploit bundle: $25 This refers to exploit packs, which is obfuscated sof…

Also, just as an additional note: it is not just Russia doing this. Countries where extradition is not an option generally tend to have the largest amount of cyber crime. The list includes China[1], Germany[4], Russia, Japan[3] and France[2]. People in these countries generally target Americans, since USA has the second largest amount of internet users (245,203,319) [5] and has one of the highest GDP in the world[6].…

For eu countries just make sure that your uk subsidiary is an interested party /effected by the crime and eu arrest warrants are easy to get.

Re: The Russian underground economy has democratized cybercrime

#19
post #5

It has always fascinated me how history, individuals, geography and natural resources influenced people, their mentality in various world regions. While Russia is rich for natural resources (diamonds, gas, oil), just a few people profit from them. Next tear of wealthy individuals mostly profit from serving those who profit from natural resources… Natural resources imply that value is already created. You dont have to…

Assuming you include Russian Jews, you get a lot of successful Russians doing tech stuff in the world -- just in other countries than Russia. Israel, the US, etc. have Russian Jewish populations who are incredibly successful in tech.

Re: The Russian underground economy has democratized cybercrime

#20
post #16

Earlier quoted context omitted.

A year ago a "friend" of me hired a russian hacker, just for a joke, and he hacked my gmail, twitter and facebook accounts. And the passwords were random 10 caracters or something like that. He hired the hacker in free-lance.ru

Any more information to this story? Do you know how they did it?

I'm sorry but I don't know how did he do it. I was wondered when I saw that I can't login in to my gmail account. I thought that it's impossible someone to hack my gmail account, because Google is a big company they should have some good codes there. But it's possible. In that day my friend sent my new password per sms my and said that it was a joke.

if you want to hire someone, go to free-lance.ru, in left menu select web-programmin (Веб-программирование)then secyrity (Защита информации) and hire someone. Some of them will do the work, if not, they know someone who can do it.

Post reply on HN