Mobile malware marketplace InTheBox detailed

More than 400 custom web injects for mobile malware are being offered for sale by the InTheBox darknet marketplace, which is thought to emerge in January 2020, reports The Hacker News. InTheBox, which may be the biggest marketplace for mobile malware web injects, features an automated ordering system that would provide threat actors access to the most updated injects, according to a Resecurity report. Threat actors accessing InTheBox through the Tor anonymity network could obtain a $100 monthly subscription for web injects or seek an unlimited plan that costs from $2,475 and $5,888 based on supported trojans. Alien, Hydra, Cerberus, Octo, ERMAC, and its successor MetaDroid are some of the Android trojans supported by InTheBox, the report showed. "The majority of high-demand injects is related to payment services including digital banking and cryptocurrency exchangers. During November 2022, the actor arranged a significant update of close to 144 injects improving their visual design," said researchers.