A Pastebin entry detailing the offer of SpyEye v1.3.48 - with the newest software, injection types and plugins - for only $150 has been recently spotted by McAfee researchers (click on the screenshot to enlarge it):
The price, which includes three months of free hosting, is ten times smaller than the one typically asked for for the same package on a number of freelancing project websites.
The newest version of the botnet does not offer many improvements over the previous ones - not that that lessens its effectiveness. As a reminder, the source code of SpyEye v1.3.45 has been previously leaked online.
"Bad guys or script kiddies are willing to pay a lot of money for this popular botnet," point out the researchers. "With people selling this botnet for such low prices and with the availability of leaked code, we may see a rise in this botnetís activities and control servers."
Still, the researchers doesn't say whether they have tried to contact the seller, so there's always a possibility that the offer is bogus or a scam set up to fleece inexperienced would-be botnet herders.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.