Page 63 - index
P. 63
Image 3. TVSPY CnC panel
Image 4. TVSPY CnC Panel stats
Who sells TVSPY?
Scalpel started to sell this malware on criminal forums last June 2014 for $400. He took over the
sale for Mr.Burns. The original malware was created by Mr.Burns, he created something similar
called RMS. Mr.Burns found a way to take advantage of Teamviewer v6 using a DLL to hijack the
session. Teamviewer v6 was released in 2010. We were able to obtain a public version of RMS 5.6
that looks very much like the TVSPY builder. Mr.Burns recently deleted his youtube channel where
he had 2 videos showing how RMS and TVSPY work.
63 Cyber Warnings E-Magazine – September 2015 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide
