UNC Research: Malware Now a Sophisticated Industry

A study by a criminal justice professor at the University of North Carolina at Charlotte has found that selling malware has become a sophisticated business supported by advertising, marketing, and support services.

UNCC Assistant Professor Thomas Holt said the study was based on research on 30 different hacker forums around the world but focused on six forums, including ones hosted in eastern Europe.

Holt's study, called "The Market for Malware," was done in
conjunction with the UNCC Department of Software and Information Systems, which operated a "honeynet" that helped the researchers identify and join the forums.

"The idea was to go into the forums and find out how they work," said Holt, who spoke at the recent DefCon 2007 conference. His remarks were reported by "Dark Reading," a website affiliated with the Tech Web group.

The typical hackers' forum operates like combination of eBay and an online department store, Holt said. They often specialize in areas of interest--such as programming, scripting, Mac, or Linux.  Most have buying areas where shoppers can purchase tools, bots, or credit card data collectors.

A typical transaction in a hacker forum can sell from less than $100 to more than $3,000, according to Holt's research.

Read More:

About the Author

Paul McCloskey is contributing editor of Syllabus.

Featured

  • cloud computing circuit board background

    Report: Cloud Crime on the Rise as Attackers Exploit Trust

    CrowdStrike's 2026 Threat Hunting Report traces a multiyear shift from conventional intrusions toward attacks that exploit trusted identities, cloud services, AI systems and software dependencies.

  • Glowing route lines merging into single gold pathway

    Microsoft Merges Copilot Apps Into a Single User Experience

    Microsoft recently announced it is consolidating its consumer Copilot app and Microsoft 365 Copilot app into a single destination, addressing a fragmented product strategy that has required users to navigate separate applications for AI chat and productivity tools.

  • Abstract Network Connection Structure with Glowing Nodes and Lines on Dark Background

    Rubrik, CrowdStrike Expand Integration to Speed Identity Recovery

    Cybersecurity companies Rubrik and CrowdStrike have announced an expanded identity-security integration intended to move compromised identity environments from threat detection through clean recovery with less manual intervention.

  • Abstract neural network 3D illustration

    Intel® AI EmpowerED: The AI-Ready Campus, Delivered

    Artificial intelligence is transforming higher education, prompting institutions to rethink how they manage infrastructure, security, governance, and workforce readiness. Successful adoption requires a strategic, institution-wide approach that aligns AI initiatives with educational goals, faculty enablement, and scalable operational frameworks.