Remove 2019 Remove Libraries Remove Mining
article thumbnail

Blue Mockingbird Monero-Mining campaign targets web apps

Security Affairs

Crooks exploit CVE-2019-18935 deserialization vulnerability to achieve remote code execution in Blue Mockingbird Monero-Mining campaign. “Blue Mockingbird is the name we’ve given to a cluster of similar activity we’ve observed involving Monero cryptocurrency-mining payloads in dynamic-link library (DLL) form on Windows systems.”

Mining 323
article thumbnail

Cryptojacking Coinhive Miners for the first time found on the Microsoft Store

Security Affairs

The removed apps are Fast-search Lite, Battery Optimizer (Tutorials), VPN Browsers+, Downloader for YouTube Videos, Clean Master+ (Tutorials), FastTube, Findoo Browser 2019, and Findoo Mobile & Desktop Search. The mining script then gets activated and begins using the majority of the computer’s CPU cycles to mine Monero for the operators.”

Mining 278
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installs

Security Affairs

The malware is an evolution of a Monero cryptocurrency miner that was first spotted by Unit 42 researchers in 2019. “LD_PRELOAD forces binaries to load specific libraries before others, allowing the preloaded libraries to override any function from any library. ” continues the analysis.

Cloud 305
article thumbnail

Oracle critical patch advisory addresses 284 flaws, 33 critical

Security Affairs

Oracle released the first critical patch advisory for 2019 that addresses a total of 284 vulnerabilities, 33 of them are rated “critical”. The Commons FileUpload library is the default file upload mechanism in Struts 2, the CVE-2016-1000031 was discovered two years ago by experts at Tenable. ” reads the d escription provided by.

article thumbnail

Phishing campaign targets LATAM e-commerce users with Chaes Malware

Security Affairs

In 2019, over 320 million users were registered with the MercadoLivre e-commerce platform. . bin, researchers also observed the use of a cryptocurrency mining module. . Chaes is written in several programming languages including Javascript, Vbscript,NET , Delphi and Node.js. SecurityAffairs – hacking, malware).

Phishing 336
article thumbnail

The Long Run of Shade Ransomware

Security Affairs

As stated in a recent Eset report , the Shade infection had an increase during October 2018, keeping a constant trend until the second half of December 2018, taking a break around Christmas, and then resuming in mid-January 2019 doubled in size (shown in Figure 1). Trend of malicious JavaScript downloading Shade ransomware (source: ESET).

article thumbnail

Interpol: Goldfish Alpha operation reduces cryptojacking by 78%

Security Affairs

The operation was launched in June 2019, the experts first identified the compromised devices then alerted victims to install security patches that lock out the malicious code. ” reads the press release published by the Interpol.

Mining 243