You make me sell the secret network black chain
"Pconline " in the huge economic interests of the drive, illegal black production practitioners every day to find ways to "black" money from the Internet. They are well-organized, with a clear division of labor, people write viruses, people spread, people steal, people sell stolen "loot", and then form an underground black industrial chain, daily turnover in the global black production network of hundreds of millions of transactions. So, how do they deal with each other? In this issue, we will come to a probe.
You make me sell the secret network black chain
In fact, some security researchers have long been lurking in the underground black production network, observing the mode of operation. Here, what we call a network is not a shallow network that users can access daily, but a deeper level. On the dark web, we have in the previous article in a single article for you to introduce, here no longer repeat. It is precisely this part of the network that is severely battered by law.
The hackers ' Forum of Anonymous access is a hacker trading site scattered in the dark web, but first you need to be recognized by the hacker community, then you can get into the hacker forum and find all kinds of illegal services, even if a common hacker can quickly launch a cyber attack. Of course, you are unable to search for these forums and require a lot of verification programs to be secured with other hacker members. From the Russian hacker forum, we can see that hackers are selling a variety of malicious software, including Trojan horses, botnets, and so on.
Now, most people who write viruses do not emit viruses, but instead put them on the internet to sell the most central parts of the virus. Today, all walks of life pay attention to "personalized customization", the virus will be prepared according to customer demand, tailor-made. It is understood that a virus writer monthly income can be million. And in the Baidu input "sell Trojan" or "sell virus" keyword, the search page over million articles.
We'll talk about hacking equipment, and here we have to mention a mouth exploit Kits. Exploit Kits integrates many of the components required for cyber attacks, including online banking Trojan Zeus, Vawtrak, ransomware Nymaim, bitcoin extortion virus ctb-locker, and so on, dramatically increasing the success rate of hacking attacks, before using Exploit kits, Hacker's success rate is generally only 10%, after use can be raised to 40%, so deeply favored by hackers.
The left-hand chart below is a real-world case where hackers sell their own attack kit rig on a forum. Rig Support x86/x64 Window System, can bypass the Microsoft User Account Control system, can carry out large-volume attacks, automatic loading of web links, etc., the average attack success rate of 10% to 15%, to ensure the successful evasion of anti-virus software discovery. The diagram on the right shows the business model of the rig.
In the rig business model, there is a central warehousing also has a multi-level dealer, can be directly to the end hacker sales, also support multi-level sales, other hackers at a higher price for two resale, if a week 600 sales, every $150 to calculate, the rig's weekly profit of up to $90,000. In fact, a tool maker like a rig in black production is the backbone of the black industry, providing the material, equipment and services of attack for ordinary hackers, earning the most lucrative part of the profits, calling it "the black Deacon".
In addition, in addition to selling attack kits, some "black Deacon" will also want ordinary hackers to sell other services that can improve the attack success rate, known as "professional outsourcing services" in black production, such as "Detection escape" service. That is, the detection of the escape service loaded into the malware, you can escape the scanning of anti-virus software, which is now the most important work of security companies, analysis of virus signatures to update their own virus database.
With the help of network black production, even a technical ordinary hacker, can also earn million in attack activities. From buying (or renting) attacking kits to adding additional services to increase the success rate, the cost to launch an attack is about $ thousands of, but a hacker's monthly income is far more than that, and the so-called no-profit does not get up, and monthly earnings are just a conservative figure.
Day and Day PA http://www.riripa.cn
You make me sell the secret network black chain