04:49 PM

Schwartz On Security: Reaching The M&A Tipping Point

The jury is out on whether businesses will benefit from Intel buying McAfee or from Symantec, IBM and Microsoft sucking up everything in sight.

But there are signs that some security companies may be reaching a tipping point. On Saturday, The Wall Street Journal reported that Relational Investors LLC began building a stake in Symantec earlier this year, so as to split the company into separate security and data storage businesses. Analysts say that Symantec is still having difficulty benefiting from its 2005 acquisition of Veritas.

If the rampant pace of merger and acquisition activity threatens to create a fast food approach to information security -- ease over substance -- thankfully there's been some undeniably good news on the botnet M&A front lately: The brains behind the Zeus crimeware toolkit will reportedly retire, allowing his code to be merged with a competitor.

Zeus expert Don Jackson, director of threat intelligence at SecureWorks, recently told Reuters that the anonymous programmer behind Zeus had announced his retirement, saying his creation was taking too much heat, and that he'd hand the Zeus source code to up-and-comer financial crimeware outfit Spy Eye.

Little is known about the Zeus author, who first hit the scene in 2007, except that he appears to be Russian and to favor usernames based on expensive cars. Jackson, however, thinks the retirement announcement is a ruse so that the Zeus author can drop his less lucrative and more high-maintenance customers. He estimates that, so far this year, Zeus-using gangs have netted at least $100 million.

But other security experts noted that after you've sold enough software to earn yourself what's likely millions of dollars, then if not retire, you could afford to take a break.

With luck, one way or another, the author of Zeus will go away for a long time.

2 of 2
Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio