{"id":42644,"date":"2021-09-02T04:27:42","date_gmt":"2021-09-02T04:27:42","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/dissected-a-dropper-as-a-service-miscreants-pay-to-push-their-malware-onto-potentially-1000s-of-victims\/"},"modified":"2021-09-02T04:27:42","modified_gmt":"2021-09-02T04:27:42","slug":"dissected-a-dropper-as-a-service-miscreants-pay-to-push-their-malware-onto-potentially-1000s-of-victims","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/dissected-a-dropper-as-a-service-miscreants-pay-to-push-their-malware-onto-potentially-1000s-of-victims\/","title":{"rendered":"Dissected: A dropper-as-a-service miscreants pay to push their malware onto potentially 1,000s of victims"},"content":{"rendered":"

A dropper-as-a-service, which cyber-crime newbies can use to easily get their malware onto thousands of victims’ PCs, has been dissected and documented this week.<\/p>\n

A dropper is a program that, when run, executes a payload of malicious code. The dropper is similar to a trojan, and it can sometimes have other functionality, but its main purpose is to get malware \u2013 which could be fetched from the internet, or unpacked from data within the dropper \u2013 running on a victim’s computer.<\/p>\n

With a dropper-as-a-service (DaaS), a customer pays to have their malware distributed to these computers via droppers. The DaaS typically uses a network of websites to deliver droppers onto victims’ PCs that when run install and execute the customer’s malware. The droppers could be disguised as legit or cracked applications that netizens are tricked into running. These sorts of operations have been around for a long while, though it doesn’t hurt to keep up to date with what’s out there right now.<\/p>\n