Malware targeting cash machines fetches top dollar on dark web

On the other hand, if it works, then why does it have a retail price at all?

Most malware has a shelf life, depending on how fast the defences evolve to counter it, so any bit of code isn't a perpetual money machine, and crims need to get the harvest in while they can. Even if it still works, the advanced crims will be developing new versions, so selling a superseded version that the original "IP owner" is money for old rope from their point of view.

Also, ensuring there's a lot more low rent black hats and crims dilutes the ability of the plods to find the people at the top of the chain. Both because there's more crims, and because more of them will be unskilled dopes.

"Why do the people who can get unlimited free money, want your money?"

another reason will be that there is less risk in selling the tools than using them.

Also, I would not be surprised if the coders selling the scripts are embedding code to give them access to compromised machines.

Why do the people who can get unlimited free money, want your money?

Because it's lower risk than actually ripping off the ATM yourself.

Other than that I fully agree - it's a bit like attending those "Make MILLIONS in just two hours" seminars. Often given by people in cheap suits and driving crappy cars. If they really knew how to make money, they wouldn't be making a pittance selling stuff to credulous morons..

Re: At least some people are getting a computing education

Probably all too true and very sad. Also, the price points are not so high that someone could buy the tools they need for for a campaign, which multiplies the number of possible actors.

Re: Your Money Back. Guaranteed,.

The dark web must have very strict rules about getting your money back

I suspect that "not wanting a quiet conversation in an alley with a big bloke with more muscles than morals" also comes into it.

Re: Your Money Back. Guaranteed,.

It's considered safer for drug buyers and vendors to use the dark web to meet and transact than to meet in person. A vendor has a reputation to lose if the product doesn't arrive or do what's advertised. Then there's the avoidance of turf wars, which without availability of recourse to civil law, tends to involve debt collection and contract enforcement using violence or threats of such. These same considerations applying to illegal drugs will also apply to dark web malware and hacking services marketplaces. The possibility of anonymous payment using Bitcoin makes this all possible - to the extent significant inherent risks, hassles, costs and delays make using this system for criminal payments worthwhile. Money laundering using cash is also much more risky and for similar reasons.

Clearly the purchaser needs to check the reputation of the vendor for reliability of delivery and quality of goods and services as with any online purchase.