Last week, it was reported by eWeek that the source code for the Zeus Banking Trojan was released on the Internet. Previously, the source code was not distributed but instead Zeus was sold as a builder kit for thousands of dollars so cybercriminals could easily build attacks but had to make money just like a business. Now, Zeus is free AND the source code is available.
The fact that it’s available for free means that we will likely see a larger number of Zeus attacks launched by less sophisticated cybercriminals. However, to truly capitalize on Zeus there still needs to be a certain infrastructure in place to move the money around and/or sell the stolen identities. It remains to be seen how successful any new attacks will be on a large scale.
However, with access to the source code, more sophisticated cybercriminals can creatively repackage Zeus or modify the code to better evade detection by security software. In addition to banking sites, other e-commerce sites may now be vulnerable and/or new forms of malware with Zeus components may be used to launch attacks.