Home Malware Programs Trojans Scylex

Scylex

Posted: August 15, 2016

Threat Metric

Threat Level: 9/10
Infected PCs: 5
First Seen: August 15, 2016
Last Seen: March 5, 2019
OS(es) Affected: Windows

Scylex is a new banking Trojan that is yet to be spotted in the wild. Malware researchers first came across this threat on an underground forum that seems to be the first place where Scylex is being sold. According to the offer published by the Trojan's authors, Scylex is an entirely new banking Trojan that doesn't borrow any source code from other known threats. This is exceptionally threatening, because recent banking Trojans were mostly based on the leaked source code of Zeus, and many of them were detected by anti-malware software easily. However, Scylex is advertised as entirely new, and its authors state that the Trojan is currently fully undetectable.

The topic used to promote Scylex states that this banking Trojan is loaded wth features, and its authors promise that the threat will be updated regularly to increase new features that can expand its functionality. The basic version of Scylex is being sold for $7.500, and it includes a rootkit module, infostealer, SOCKS5 reverse proxy, and even allows attackers to inject manipulated data in Web forms. The authors also offer more expensive packages that include extra features such as full SOCKS5 proxy support, and the Hidden Virtual Network Computing, a very advanced option that allows ill-minded users to operate virtual desktops on an infected machine.

The features that the authors have planned include a DDoS module, click-bot, spreader, and even an ATS engine to operate transactions using hijacked bank accounts. While the Scylex banking Trojan is still not released in the wild, it is probably a matter of time before we hear more about this advanced cyber threat.

Loading...