Topics Tools Books & Guides Talk to Securafy

Knowledge Hub / Business Continuity

Business Continuity

Malware-as-a-Service Gaining Popularity

Malware-as-a-Service Gaining Popularity

Randy Hall By Randy Hall Updated Nov 2025 2 min read Share

Malware as a Service (MaaS) has gained popularity over the past few years as a method of spreading malware. Typically, MaaS is provided at a monthly, annual, or lifetime subscription price. Once a threat actor obtains access to the malware, they can target individuals through various tactics.

A relatively new MaaS has emerged, called Erbium. Erbium is spread quickly across the internet disguised as cheats and hacks for popular video games.

Due to the fact that the Erbium malware subscription is affordable,  has excellent customer service, and a wide array of skills at a competitive price, it is attractive to threat actors. Additionally, due to the growing popularity of Erbium, the membership fee increased from $9 a week to $100 a month or $1,000 a year in late August 2022.

The development of Erbium appears to be in its early stages, however, it has been detected in several countries worldwide, including the United States, France, Colombia, Spain, Italy, Vietnam, and Malaysia.

The Erbium malware is exceptionally versatile in gathering data from infected devices. In addition to extracting information about the browser, the malware also extracts passwords, cookies, credit card numbers, auto-fill information, cryptocurrency wallet information, and two-factor authentication credentials without the user being aware of it.

Installing an antivirus program on your computer is an effective way to keep it safe from malicious software. Additionally, it is also essential to ensure that you're updating your operating system and software regularly and downloading applications only from credible sites.

Join The Conversation

Have a question or perspective on this topic? Add it below.

Randy Hall

About The Author

Randy Hall · CEO & Founder

Randy Hall is the CEO and Founder of Securafy, with decades of experience helping organizations make smarter, safer decisions about technology.

A frequent speaker and instructor at national IT events, Randy has advised thousands of organizations, from startups and SMBs to large enterprises and U.S. government entities, on secure, practical technology adoption. He writes about the decisions business leaders are often expected to make without enough context, including cybersecurity, compliance, AI, cyber insurance, IT strategy, and business resilience.

Outside the office, you’ll often find Randy on Lake Erie enjoying time on his 38-foot Chris-Craft.

Writes about: Cybersecurity strategy, compliance, AI security, business resilience, cyber insurance, SMB risk, IT leadership

More From This Author →

Get Practical Cybersecurity Field Notes

Monthly cybersecurity, compliance, and IT strategy updates from Securafy, written for business owners who need clear next steps.

  • Practical security tips from our Cyber Security Drip series
  • The Securafy Times, our monthly roundup on compliance and IT strategy
  • Occasional updates on new tools, guides, and research
  • No spam — unsubscribe anytime