On the hacker forum BreachForums, a user under the alias “Yunguns” has listed a tool called MyCrypter for sale. This program is designed to bypass various security mechanisms, including Windows Defender, SmartScreen, antivirus software, and browser security warnings.
The advertisement claims that the private Fully Undetectable (FUD) crypter supports signed executables using EV certificates, offers customizable generation settings, and retains functionality for 4–5 months from the time of creation.
The pricing for the service varies: a single build costs $650, a three-month subscription for access to the crypter builder is $550, and lifetime access with updates is offered for $1,000. Additionally, one-time manual payload signing services are available for specific tasks.
The sale of such a tool poses a significant threat to both organizations and individual users. The deployment of crypters of this caliber is likely to result in an increase in attacks involving malware, including phishing campaigns and ransomware distribution. For the cybersecurity sector, tools like MyCrypter present a formidable challenge, as they undermine the effectiveness of traditional security defenses.
Organizations are strongly advised to bolster their security measures, including implementing EDR solutions, monitoring network activity, and ensuring timely software updates. Employee training to identify phishing attempts is also a vital preventive measure. For cybersecurity solution developers, a critical priority remains the creation of advanced algorithms to detect sophisticated threats like MyCrypter, as well as fostering collaboration with industry peers to develop effective countermeasures against such tools.