New Toolkit Poses in a Whitehat
A new set of tools and services has been released very recently from our friends in Russia. A group of Russian Hackers who are pretending to be working on the side of good have released, among other things, RH2.5 kit version 2011 for the new year. This kit contains all sorts of tricks, tips and tools with all new updates. The site gives this claim along with the toolkit "Russia Hackers is pleased to announce RH2.5 KIt ver 2011 that users can use to Hack & secure computer systems by knowing exactly how a hacker would break into it."
While some of these tools can be and are used by true security professionals, such as SET (The Social Engineers Toolkit) and Metasploit, many of them have no ethical purpose whatsoever. These include, but certainly aren't limited to #6 "download any Apple App for free", and #9 "Spreading guide to infect 100/k victims per day", I mean they use the term victim even. As you can see from the screen shot below this kit is available for a mere $100 US. But that's not all, they also offer other tools and services in a separate package. This one even includes access to one of the latest botnets out there - SpyEye. SpyEye, has been going toe to toe with its rival Zeus since late last year, and has been making some pretty big waves in the security community. I'm not sure how leveraging this botnet and all of the innocent PCs turned zombies is in any way even close to ethical.
But wait that's not all, they'll also do custom orders, in any of the latest vectors, Javascript drive-bys, bots, cryptors, or anything you can request, just drop them an email. Or if you're really "brave" you can hire them to pen test your network for you! That doesn't sound frightening at all!
As long as malignant groups of hackers remain out there making attempts to subsidize their other criminal activities by selling their warez as well, especially for this cheap, we're going to continue to see attacks from the script kiddies and the professional cybercriminals continue to grow. The Zeus trojan which began as a private tool for a small cybergang spread like wildfire once it was released as a kit by that same group looking to cash in on its effectiveness. Zeus continues to remain one of the biggest threats out there today.