An Introduction to Hacking and Crimeware

CHAPTER 2: CRIMEWARE PRODUCTS

This chapter describes different varieties, and the evolution of, commercially available crimeware: from toolkits to exploit vulnerabilities of operating systems, to malware as a service, to crime accessories of cyber hooligans and thieves.

“Zero Day” exploit toolkits

In October of 2008, a commercial “Zero Day” attack pack was made available to the Chinese hacking community via a well-known public hacking repository website. The attack pack exploited a Microsoft^® Windows^® vulnerability, named MS08-067, which could allow remote code execution if an affected system received a specially crafted remote procedure call request.¹⁷ As soon as this vulnerability became known, the MS08-067 port scanning toolkit with attack ...