Posted on October 27, 2018 at 6:31 PM

DDoS and Ransomware Tools Used by Cyber Criminals Discovered

A new Ransomware and DDoS tools have been unveiled. These tools act as a service scheme, which offers a gliding commission pay scale.

A new set of malware functioning as a service scheme has been discovered along with another one created as an easy to use point of entry for beginner DDoS attackers. The second offers come as a sliding commission pay scale, which increases when additional ransomware victims are attacked.

The Fortinet research team comprising of Evgeny Ananin and Rommel Joven has dived into a DDoS as a service, which is available on numerous Dark Web Forums. Alternatively, bleeping computer has the description of a new ransomware, which operates as a service using FilesLocker malware targeting American and Chinese victims.

The Fortinet’s DDoS kit cloaks itself in the form of a genuine stresser or booter service. Considering the fact it is not hard to set up, this makes it possible for anyone to venture into the “DDoS a website for a fee” business. One can extremely personalize some of these offerings.

Ananin with his partner Joven discovered similar service that began operation on October 17 known as 0x-booter. The 0x-booter uses the Bushido botnet for its attacks. However, Bushido is moderately new after been identified in September.

Details of the DDoS Attack

A complete DDoS can be introduced, established, and controlled through a single user interface, which provides aspiring attacker different options. The service claims to have the capacity of pushing out a 500GB per the second attack from 20,000 bots. However, the attack can be established for the different level of strength including length with prices ranging from $20 to $150

A snapshot of the price list indicates that the $30 service will generate two 900-second attacks, which comes with access to essential tools needed and a 24/7 support system. When testing the service, Fortinet was able to acquire a slightly lower performance. Nevertheless, it indicated that the attack was able to bring down most websites. Fortinet claims its service had previously been used in launching about 300 attacks.

The FilesLocker program is very different, which requires some skill to use. However, the bleeping computer was placed on the trajectory of RaaS by security researcher Neutral8✗9eR and was discovered to be marketed via a Chinese malware forum on TOR.

Those trying to sign up are offered 60% revenue share of any payment received. Nevertheless, if the individual is able to provide more victims, the revenue share could increase to 75%. The TOR advert was claimed to be written in C# with a size of 212kb and works against different operating systems. Furthermore, it comes with a dual English/Chinese ransom note and interface. Additionally, there is also a statistics generator to track attacks made. The attack normally targets files such as picture, music, documents, and desktop according to Bleeping Computer.