Kaspersky Lab analysts have traced the source of Krotten. Trojan program was spreading disguised as a program which would generate codes to top up mobile phones. It was placed on a site located in Russia which was hosted free of charge. Site states that the code generator was developed by Ukrainian hackers and guarantees a 100% result. Site is often used by malware authors as the users are not required to provide personal details and therefore enjoy total anonymity. If the site had been hosted in return for payment, it would have been far easier to track it down.”]
Source: https://securelist.com/krotten-source-traced-for-the-moment/30086/