Since the evil genius behind ZeuS announced his retirement last fall and handed over his source code to the creator of rival Trojan toolkit SpyEye, the security world has been counting down with some trepidation to see what the merger will produce. It seems the zero hour may soon be upon us.
A Trend Micro blog posts hints that a new SpyEye toolkit beta may just be the first generation of the hybrid ZeuS/SpyEye toolkit. Both ZeuS and SpyEye have wrought their respective share of cyber destruction. The new toolkit appears to combine the strengths of both, while also demonstrating some improvements and polish, and adding in some new features to evade and circumvent security controls.
A ZeuS/SpyEye super Trojan could be a formidable piece of malware. The good news is that security vendors like Trend Micro are paying attention, and are aware that its only a matter of time. Hopefully, security researchers will be able to piece together enough from working with the toolkit to be prepared to defend against it when the threat starts spreading in the wild.