Trend Micro has discovered Lordfenix, a student who has created more than 100 different bankers Trojans and other malicious tools since April of 2013.
Trend Micro security experts have discovered a 20 Brazilian student who has developed and distributed more than 100 bank malware.
The new cyber criminal, who used the nicknames "Lord fenix", 'Hacker's Son' and 'Filho de Hacker', has been selling each banking trojan for about US $ 300 since 2013.
Trend Micro reported that the student started his activity by getting in touch with hacking forums where he found the collaboration of other malware writers.
Since its inception, Lordfenix has "developed its skills" and consequently has grown its business by developing malware based on the needs of its customers.
Lord fenix began his activity by offering free versions of the fully-functional source code of the bank Trojan to the underground forum.
The free version worked to target customers of four Brazilian banks, including Bank of Brazil, Caixa, and HSBC Brazil.
The following model was profitable: Lordfenix offered further customization of the banking trojan to target other financial institutions.
«Lordfenix has since continued to develop and sell banking Trojans, one of which we have traced as TSPY_BANKER.NJH. This Trojan is able to identify whenever a user types any of their target bank's URLs. These include Banco de Brasil, Caixa, and HSBC Brasil."Said Trend Micro in its statement.
Over the years, Lord Phoenix has improved its malware by adding further features such as protection against security products.
Lord's Phoenix malware is capable of discovering and ending the GbpSV.exe process associated with the G-Buster Browser Defense software, a security program used by many Brazilian banks to protect their users.
Dimitris hates Mondays...
