Finfisher is an interesting product. Much of what it offers has been available in open source projects[1][2] for quite a while. I imagine it's probably the mana

Finfisher is an interesting product. Much of what it offers has been available in open source projects[1][2] for quite a while. I imagine it's probably the management overhead and GUI based interface that they sell it on. Evilgrade (link below) is particularly interesting and handles the fake update part of the infection. Typically you'd use something like a metasploit (or equivalent) payload to install. [1] - http://www.infobyte.com.ar/developments.html http://www.infobyte.com.ar/developments.html [2] - http://www.metasploit.com/ http://www.metasploit.com/