length: 00:28:28

growing popularity of custom trojan

highly QA’d subscription based malware

you can go to a website and order your own malware, plus you can get support , it’s “underground” , very active, started with HackerDefended days, the Holy Father

update every 3 months & guaranteed to avoid detection

then you can use online testing, such VirusTotal to QA – not necessarily you have the share the sample!!!

Should the writing of exploit, buying, selling considered illegal?

Companies that look/buy/bounty of vulnerability can cause more harm

Every time you put money in the equation, there will be evil component

When malware going PARASITIC, it’s going to be nightmare

More sophistication, easier to ransom, it’s high level coding

More complex to clean & restore

A lot of attack to foreign government has China as reference state sponsored malware writing group?