Re:Ransomware gives free decryption keys to victims who infe...
by deoxxa on Saturday December 10, 2016 @07:02PM
(#13148722)
This is roughly what happened with several "exploit droppers" a few years ago. It wasn't pretty GitHub sites or open source blogs, but rather "leaked" versions of the software suites, missing nearly all of the actual exploits. Usually there'd be a couple of very old, widely patched exploits in there so you could see how it worked. People would download the stripped out version, play with it, then buy the actual exploit payloads/plugins.
Pretty interesting process to watch from the sidelines!
https://cyber.harvard.edu/cybersecurity/Economics_of_Malware
https://www.coursera.org/learn/malsoftware
At some point, it would make sense anonymized malware (i2p, tor only) may go open source similar to commercial open source but instead because of scene cred / blackmarket consulting.