McAfee experts analyzed the new variant and found one difference compared to the older one

Apr 23, 2012 14:27 GMT  ·  By

As pieces of malware and botnets become more common their prices seem to drop, making them highly accessible to almost anyone. McAfee experts found a Pastebin paste that advertised a variant of the SpyEye botnet for just $150 (€114).

For this price, the buyer gets 3 months of free hosting, along with components such as an admin panel, formgrabber panel, gate installer, setup manual and even a special system designed to detect Trusteer’s Raport solution.

The same version of SpyEye, 1.3.48, is available elsewhere for prices starting at $1,500 (€1,140), but since the source code and technical details of the 1.3.45 variant were made public, the prices were bound to drop.

Experts compared the two versions and noticed that the only big difference between them is the fact that the newer variation uses a XOR key to decrypt the configuration file from the resource section.