Original URL: http://www.channelregister.co.uk/2007/12/31/vxer_scene_rip/
The old School Virus writers (VXers) scene is dying a death, according to Symantec.
Key members of long-established VXers groups are drifting away while others are struggling to get enough material together for underground malware magazines. "There should be no question anymore that the VX scene is dying," Symantec reports.
Roy g biv has officially left the 29A group while prominent member Vallez has been silent for over a year. 29A, Hexadecimal for 666, is a virus writer group known for creating the first Win 2000 virus and early examples of mobile malware that infected PDAs and the like.
Meanwhile neither EOF or DoomRiderz, other loose-knit VXer groups, have enough material for a new zine. The two are planning to throw in the lot with another group, rRlf, in an attempt to get together enough material for a magazine. "Even those three groups combined might not have enough material for a zine," notes (http://www.symantec.com/enterprise/security_response/weblog/2007/12/notes_from_the_underground.html) Symantec researcher Peter Ferrie.
Profit has replaced mischief, intellectual curiosity or a desire to make a name for yourself as the motive for creating malware over recent years. Traditional virus writers have drifted away from the scene to be replaced by more shadowy coders creating sophisticated Trojans aimed at turning an illicit profit. Enforcement action against virus writers has acted as a further disincentive for hobbyists though not, unfortunately, for those that make their livelihood from cybercrime.
Virus writing has changed from a cottage industry to a commercial enterprise. So instead of getting proof of concept malware from hobbyists we're dealing with the Storm worm Trojan and other sophisticated "professionally developed" botnet clients, such as Nugache (http://www.schneier.com/blog/archives/2007/12/the_nugache_wor.html), a new malware strain that can be controlled without use of a command and control server.
The days of malware that deletes (http://www.theregister.co.uk/2005/04/28/manele-hating_malware/) Romanian gypsy music, talks (http://www.theregister.co.uk/2004/09/13/amus_worm/) to victims or creates a game that allows users of infected PCs to throw (http://www.sophos.com/virusinfo/analyses/w32coconuta.html) coconuts at anti-virus expert Graham Cluley have become relics of another era. ®
Mexico and Africa to become malware hotspots (18 January 2008)
http://www.channelregister.co.uk/2008/01/18/future_cybercrime_hotspots/
Anti-virus groups fight over Crossover sharing (6 March 2006)
http://www.channelregister.co.uk/2006/03/06/crossover_ruling_angers_industry/
VXer targets Romanian gypsy music (28 April 2005)
http://www.theregister.co.uk/2005/04/28/manele-hating_malware/
Worm plays Tetris with victims (14 January 2005)
http://www.theregister.co.uk/2005/01/14/tetris_worm/
'White collar' virus writers make cash from chaos (7 December 2004)
http://www.theregister.co.uk/2004/12/07/sophos_av_review_2004/
Russian fined for virus-writing exploits (18 November 2004)
http://www.theregister.co.uk/2004/11/18/russian_vxer_fined/
Anti-virus outfit defends job for VXer (12 November 2004)
http://www.theregister.co.uk/2004/11/12/vxer_job_controversy/
First PocketPC virus found (19 July 2004)
http://www.theregister.co.uk/2004/07/19/pocketpc_virus/
Belgian police arrest female virus writer (16 February 2004)
http://www.theregister.co.uk/2004/02/16/belgian_police_arrest_female_virus/
Virus writers ‘obsessed with sex and computer games’ (27 August 2002)
http://www.theregister.co.uk/2002/08/27/virus_writers_obsessed_with_sex/
Hunt for Code Red authors turns into witch hunt (13 August 2001)
http://www.theregister.co.uk/2001/08/13/hunt_for_code_red_authors/
Sex starved virus writers go for revenge (3 August 2001)
http://www.theregister.co.uk/2001/08/03/sex_starved_virus_writers_go/
© Copyright 2008