InTheBox

History

2022: Discovery of the largest virus market to steal money from bank accounts

On November 25, 2022, Resecurity announced the discovery of the largest market for malicious software on the darknet to steal money from bank accounts.

The marketplace called InTheBox is aimed primarily at developers and operators of mobile malware. The cybercriminal service has been available to attackers on the TOR network since at least early May 2020. The site has since evolved from a privately operated service to the largest trading system known for a vast array of unique hacking tools. In addition, web injections are distributed through InTheBox: this technology allows you to change the content of a web page on the client side (in a browser) and add extraneous content to it by injecting malicious code into the address space of browsers and intercepting all HTTP requests and responses from the server.

It became known about the discovery on the darknet of the largest market for malicious software to steal money from bank accounts

It is noted that the proposed tools are specially developed by cybercriminals for financial fraud. For example, web injections are used to intercept the credentials of payment systems, social networks and email providers. These malicious modules also collect other sensitive information such as credit card numbers, user addresses, their phone numbers, etc.

According to Resources experts, the InTheBox marketplace can be called the largest service for organizing bank theft and fraud using mobile devices. As of the end of November 2022, cybercriminals offered about 1,849 malicious tools for purchase. They are aimed at large financial institutions, e-commerce platforms, payment systems and online stores. The attacks affect more than 45 countries around the world, including the United States, Britain, Canada, Brazil, Colombia, Mexico, Saudi Arabia, Bahrain, Turkey and Singapore. Organizations prone to attack include Amazon, PayPal, Citi, Bank of America, Wells Fargo, DBS Bank and many others.^[1]

Notes