The global market for criminal malware now operates like a supermarket, complete with special offers and volume discounts, a security company has discovered.

According to Panda Software's, latest quarterly report the going rate for a reasonably sophisticated but generic Trojan is between £175 ($350) and £350, while the e-mail list with which to target victims for the program costs from £50 per million names. The malware writers even offer specials -- in one case the company discovered a site selling a 'payment capture' Trojan for £200 to the first 100 customers to sign up, a saving of £50 off the normal rate.

The company is shy of giving more details of the sites from which such offers were being made, but was willing to say that it considered Russia -- an area with poor antimalware legislation -- as a prime location for the malware industry.

"In recent months we have witnessed the growing professionalization of digital crime," said Panda Software's lab chief Luis Corrons. "The first step for cyber-crooks was when they started looking for profits from their activity instead of just notoriety. Now they are creating a vast online malware market, where there are even specialized segments. New business models are appearing, as we speak", he said.

According to Corrons, the malware industry now appears to be turning from being just a shop from which malware can be bought, to one where services are offered. For between one and five dollars per executable, malware could be cloaked -- encrypted -- against the anti-virus software programs it was likely to encounter on a for-hire basis. Finally, criminals could rent spam servers for £250 a time to distribute their assembled malware package, the company said.

Corrons also provides details of the cost of hiring DDoS attacks in his blog.

"This malware market is completely online. All types of creations and crimeware tools can be bought in hundreds of forums. Even though most web pages have been located in Eastern European countries, mafias extend their networks worldwide, he said.

"Although it may look difficult to find web pages where these tools are sold, it is not. All you have to do is search in browsers for forums where hacking services are rented or where Trojans are sold."

Whitepapers

• The Trend from UNIX to Linux in SAP(r) Data Centers
• Getting in Compliance With Government Data Regulations By Leveraging Online Security Technology
• How to Offer the Strongest SSL Encryption
• Maximizing Site Visitor Trust Using Extended Validation SSL
• Seven Steps to Reducing your Security Risk
• The Latest Advancements in SSL Technology

View more SECURITY whitepapers

Webcasts

• The Secure Web Gateway. Mission Critical For Business - Webcast
• Mobile Data Security
• Best Practices for Deploying WAN Optimization for Disaster Recovery
• Key Considerations for a Successful 802.11n Deployment
• Solutions to the Toughest IT Challenges in Remote Offices
• Lowering the Cost of Email Archives

View more SECURITY webcasts

Special Reports

• The Evolution of Network Security
• Taking Virtualization Up a Notch
• The self-managed network

View more SECURITY special reports