Carberp source code confirmed leaked

Carberp trojan

Last week rumors started circulating that the source code for the crimekit known as “Carberp” was leaked on the net. However, the code resided inside password protected zip file so it could not be confirmed that the leak was genuine. A very similar situation as when the source code for ZeuS was leaked.

CSIS have been investigating this further and now confirms that we have the complete source code for Carberp and that the code compiles and works just as descripted in the associated text files included in the package. The package also include the Carberp bootkit along with other source codes for what seems to be e.g. Stone bootkit, Citadel, Ursnif etc. The package is currently undergoing deeper analysis. We also found several text files containing apparently private chats and various usernames and passwords for several FTP servers. 

Source: Carberp source code confirmed leaked | CSIS