"The Largest Mobile Malware Marketplace Identified by Resecurity in the Dark Web"
Resecurity, a cybersecurity firm that protects major Fortune 500 companies, has discovered a new underground dark web marketplace geared toward mobile malware developers and operators. The marketplace is known as "In The Box," and it has been available for cybercriminals in the TOR network since at least the beginning of May 2020, but it has since evolved from a private cybercriminal service into the largest marketplace known today for the number of unique tools and web-injects offered for sale. Web-injects are implanted in mobile malware to intercept credentials for banking, payment systems, social media, and email, but these malicious tools also collect other sensitive information such as credit card information, address details, phone numbers, and other Personally Identifiable Information (PII). The Man-in-The-Browser (MiTB) attacks and web-injects designed for traditional PC-based malware such as Zeus, Gozi, and SpyEye are driving this trend. Cybercriminals have successfully applied the same approach on mobile devices because modern digital payments are highly interconnected regarding consumer mobile applications. According to Resecurity, the "In The Box" marketplace could be the largest and most significant catalyst for mobile device banking theft and fraud. The quality, quantity, and scope of the available malicious arsenal highlight the significance of the findings. Cybercriminals are currently selling over 1,849 malicious scenarios designed for major financial institutions, eCommerce, payment systems, online retailers, and social media companies from over 45 countries, including the US, the UK, Canada, Brazil, Colombia, Mexico, Saudi Arabia, Bahrain, Turkey, and Singapore. Cybercriminals have targeted organizations such as Amazon, PayPal, Citi, Bank of America, Wells Fargo, and DBS Bank. In November 2022, the actor organized a major update of nearly 144 injects and improved their visual design. This article continues to discuss the new underground marketplace in the dark web oriented towards mobile malware developers and operators.