2 Botnets of 150,000 compromised PCs hacking into users' online shopping carts

[mandy]

Two large botnets that control 150,000 compromised computers are hacking into users' online shopping carts to steal credit card numbers, bank account details, and log-on passwords, a security company said Friday.

The botnets, said Foster City, Calif.-based FaceTime, were discovered, probed, and disclosed to authorities with the help of an insider who tipped off the company's security researchers and showed them the inner workings of the bot underground.

One [botnet malware script] , dubbed "Carder," is a customizable Perl script designed to sniff out exploits in several e-commerce shopping cart applications. If Carder identifies a vulnerability, both personal data can be snatched from the individual PC, and database information -- including large numbers of credit card account number, usernames, passwords, home addresses, and the like -- can be hijacked from the e-tailer's back-end systems.

full article: http://www.systemsmanagementpipeline.com...=183700804