Recruitment ads
Sekoia analysed more than 100 ads on the Lolz Guru and BHF forums recruiting traffers to distribute infostealers and identified the teams’ common way of operating. Virus Bulletin 2023 (Sekoia)
A person or team that distributes infostealers by redirecting user traffic to malicious content.
Sekoia defines a traffer (from the Russian “траффер”) as a threat actor in charge of redirecting users’ traffic to malicious content in order to distribute information stealers. Virus Bulletin 2023 (Sekoia)
Traffers are organised in teams: team administrators hire traffers and give them automatically generated builds, a crypter service, manuals and Telegram infrastructure. According to Sekoia, the administrators’ goal is access to large volumes of fresh data through many traffers. Virus Bulletin 2023 (Sekoia)
Teams mostly recruit traffers on Russian-speaking cybercrime forums. Virus Bulletin 2023 (Sekoia)
The traffer receives a build with a unique identifier that sends the logs it collects to their own Telegram bot. Virus Bulletin 2023 (Sekoia)
They spread the build using the team’s or their own delivery methods. Sekoia
Incoming logs are gathered by the team and sold or used. Sekoia
Sekoia analysed more than 100 ads on the Lolz Guru and BHF forums recruiting traffers to distribute infostealers and identified the teams’ common way of operating. Virus Bulletin 2023 (Sekoia)
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy