• Is it illegal to produce and sell malware?
    • If no, is there any data I need to collect on the customers?
  • Is it illegal to produce and sell Crypters(programs that hide other programs from antivirus)?
    • If no, is there any data I need to collect on the customers?

1 Answer 1


The exact laws will vary by region and country, but the laws will range anywhere between illegal and almost illegal. If you want to operate as legal as possible then you will have to disclose to the buyer that the software is malware or a crypter and you should require for the buyer to sign an agreement to only use the software for legal and educational purposes. Hiding the disclosure in a long Terms of Service agreement will likely not be sufficient. You will have to explicitly advertise that the software is malware and a crypter and that you are looking for reputable tech firms to buy your software in order to improve their software.

If you sell software without disclosing to the customer that the software contains malware or a crypter then you are exposing yourself to a lawsuit for products liability, invasion of privacy, fraud and misrepresentation, the cost of damages, and possibly criminal liability.

  • Okay I found this question: law.stackexchange.com/questions/536/… The answer says: What you publish can't be “directed to inciting or producing imminent lawless action.” So, for example, I present my customer with the message: "We don't give a dime, what you do with the goods we are selling you". Wouldnt that rule out any incitement for anything, because I officially state, that I dont care? Or are there completely different rules applied, when there is a customer<->merchant relationship? Iam a lawnoob Commented Sep 5, 2015 at 1:22
  • If you knowingly sell malware to someone who uses it for an illegal purpose then you may be liable for secondary and/or vicarious liability. The same reason you cannot sell someone a weapon knowing they intend to use it for illegal purposes is the same reason you cannot sell malware knowing a person intends to use it illegally. The seller is required to take reasonable due diligence to ensure their product is safe and not misused. Read password recovery software disclaimers and the E.U.s new online privacy laws to get ideas. ec.europa.eu/digital-agenda/en/online-privacy Commented Sep 5, 2015 at 2:03
  • Could you direct me to some resources to find out, what "knowingly" exactly means? Or do you have more thoughts on that? I mean if I just say I dont care what you do with it. It is your responsibility. You just give me money and I give you some ones and zeros. Do I know anything about the intent of the buyer? Thanks! Commented Sep 5, 2015 at 2:35
  • 1
    Requiring your client to consent to the Terms of Service is a good example of how companies protect themselves from customers who buy or use their software. Requiring the customer to consent to the TOS with a "clickwrap" agreement will protect you more than using a "browse wrap" agreement. A clickwrap agreement requires the user to check a box to consent to the TOS. A browse wrap agreement only includes the TOS as a link on the page. Or obtain consent with an e-signature. pcworld.com/article/253523/… Commented Sep 9, 2015 at 0:15
  • 1
    TOS agreement are not copyrighted, so you can copy from reputable companies to follow best practices. The VLC media player says it like this. "You can use the software in the way you want (within the boundary of law), for personal, educational, research, military, governmental, professional purpose or any other way..." Commented Sep 9, 2015 at 0:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .