SpyEye Botnet Nets Fraudster $3.2M In Six Months

wiredmikey writes "The SpyEye Trojan has a well-earned place of respect in the cyber-underground as an adaptable and effective piece of malware. Those same traits have also made it a bane for countless victims and the security community, and new research provides yet another reminder of why. According to security researchers, a hacker in his early 20s known by the alias 'Soldier' led a bank fraud operation that netted $3.2 million in six months. Powered by the SpyEye crimeware kit and aided by money mules and an accomplice believed to reside in Hollywood, Soldier commanded a botnet of more than 25,000 computers between April 19 and June 29 that compromised bank accounts and made off with the profits. Most of the victims were in the U.S., but there were a handful of victims in 90 other countries as well. Among the affected organizations were banks, educational facilities and government agencies."

Re:the biggest problem here, personal responsibili

[Anonymous Coward]

"Personal responsibility means taking reasonable steps to make sure you don't harm others"

Yes, and people DON'T DO THAT. I've seen people get spyware, right in front of my eyes. They absolutely do not take reasonable steps to avoid so doing. They'll cheerfully run ANYTHING. That is not a reasonable behavior, on what is fundamentally a Turing machine.

So yes, let's hold them responsible when they don't take reasonable steps towards safe computing.

Re:the biggest problem here, personal responsibili

[mpe]

A better analogy would be someone using their car in a reasonable manner but crashing into the crowd because someone cut their brake lines.

But the brakes in a car generally don't fail because someone put the wrong CD in or tuned to the wrong radio station.