Proofpoint security researchers have found a new Traffic Distribution System (TDS) dubbed BlackTDS for sale on the Dark Web.
The operators of BlackTDS, also known to its clients as “Cloud TDS,” offers services designed as an affordable way for bad actors to deploy exploit kits and malware.
“The operators claim that their Cloud TDS can handle social engineering and redirection to exploit kits (EKs) while preventing detection by bots — namely researchers and sandoxes. BlackTDS also includes access to fresh domains with clean reputations over HTTPS if required,” as Proofpoint stated in an overview of the new TDS threat.