Security Affairs

APRIL 6, 2020

Experts uncovered a hacking campaign that is breaching Docker clusters to deploy a new crypto-mining malware tracked as Kinsing. ” The Kinsing malware abuses the resources of the Docker installations to mine cryptocurrency, hackers exploit unprotected open Docker API port to instantiate an Ubuntu container. “The spre.

Mining 339

Mining Libraries Cloud Communications 339

Security Affairs

MARCH 8, 2020

“IT officials are working to get the communication systems back online.” A few days ago EVRAZ , one of the world’s largest multinational vertically integrated steel making and mining companies, has been hit by the Ryuk ransomware. 911 calls, though, are being answered.”

Ransomware 362

Ransomware IT Computer and Electronics Mining 362

Security Affairs

OCTOBER 4, 2024

For communication, it uses a Unix socket internally and TOR externally. The malicious code copies itself to various disk locations using deceptive names, establishes a backdoor on the server for TOR communications. Once unpacked and decrypted it communicates with cryptomining pools.” ” reads the report.

Communications 336

Communications Encryption Mining Access 336

Security Affairs

JUNE 1, 2019

This script also starts an SSH daemon inside the container for remote communication.” “The script then calls a Monero coin-mining binary, darwin (detected as PUA.Linux.XMRMiner.AA), to run in the background. It also checks if the Docker host already runs a cryptocurrency-mining container and delete it if it exists.

Mining 279

Mining Honeypots Cloud Passwords 279

Security Affairs

JANUARY 23, 2021

Sophos researchers that investigated the recently uncovered crypto-mining campaign targeting SQL servers with MrbMiner malware believe that it was conducted by an Iran-based company. The experts discovered that the cryptominer was downloaded from the vihansoft.ir, mrbfile, and mrbftp domains and communicated with the poolmrb/mrbpool domains.

Mining 352

Mining Communications Access Privacy 352

Data Breach Today

JANUARY 16, 2019

Trend Micro Says It Moved Cranes Using RF Software Flaws Radio controllers used in the construction, mining and shipping industries are dangerously vulnerable to hackers, Trend Micro says in a new report.

Mining 222

Mining Manufacturing Security Communications 222

Security Affairs

JUNE 24, 2024

Over the past year, ExCobalt targeted Russian organizations in the the following industries: Metallurgy Telecommunications Mining Information technology Government Software development The Cobalt’s hallmark was the use of the CobInt tool , the same tool that ExCobalt began using in 2022.

File names 295

File names Communications Mining Archiving 295

Security Affairs

JUNE 22, 2019

Trend Micro recently discovered an Android crypto-currency mining botnet that can spread via open ADB (Android Debug Bridge) ports and Secure Shell (SSH). Security researchers at Trend Micro have discovered an new Android crypto-currency mining botnet that spreads via open ADB ( Android Debug Bridge ) ports and Secure Shell (SSH).

Mining 249

Mining Honeypots Authentication Communications 249

Security Affairs

OCTOBER 28, 2018

Earlier this year Sysdig and Aqua Security researchers started observing cyber attacks targeting Kubernets and Docker instances aimed at mining Monero cryptocurrency. Miscreants can abuse Docker Engine API to deploy containers they have created with the specific intent of mining cryptocurrencies.

Mining 275

Mining Systems administration Encryption Authentication 275

Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Communication with C&C servers is based on DNS requests and it uses a special mechanism translating DNS results to a real IP address. ” concludes the analysis.”

Mining 363

Mining Passwords Communications IT 363

Security Affairs

MAY 14, 2023

Initially, they deployed and executed a separate Monero miner alongside the usual RapperBot binary, but starting from January 2023, they included the mining capabilities in the bot. The malware decodes the mining pools and Monero wallet addresses and updates the configuration before starting the embedded miner.

Mining 246

Mining IoT Passwords Authentication 246

Security Affairs

JULY 11, 2024

top, which was observed in Muhstik botnet activities, and communicates via Internet Relay Chat. The attackers injected a command that relies on a PowerShell script to download and execute a script to spin up XMRig from a remote mining pool. The bot also connects to the command and control domain p.findmeatthe[.]top,

Honeypots 346

Honeypots File names Mining IoT 346

Security Affairs

AUGUST 19, 2020

In this network with no single point-of-failure, peers constantly communicate with each other to keep the network alive, resilient and up-to-date.” ” The botnet’s P2P communication is encrypted using AES for symmetric encryption and the Diffie-Hellman protocol for key exchange. .

Encryption 363

Encryption Mining Communications Access 363

Security Affairs

OCTOBER 7, 2020

Experts pointed out that the bot doesn’t contain any offensive features, such as the ability to launch DDoS attacks or to mine cryptocurrency, a circumstance that suggests the malware is under development. In the current version, each node cannot send control command to its peers. ” concludes the post.

IoT 336

IoT Mining Communications IT 336

Security Affairs

OCTOBER 30, 2023

The malicious code relies on a built-in TOR network tunnel for C2 communications, it supports an update and delivery functionality through trusted services such as GitLab, GitHub, and Bitbucket. Kaspersky discovered that the detections between 2017 and 2022 had previously misclassified as a cryptocurrency miner.

Ransomware 346

Ransomware Mining Communications IT 346

Security Affairs

JUNE 19, 2021

“RedFoxtrot has primarily targeted aerospace and defense, government, telecommunications, mining, and research organizations in Afghanistan, India, Kazakhstan, Kyrgyzstan, Pakistan, Tajikistan, and Uzbekistan. located in Wuhan.” ” concludes the report.

Military 338

Military Mining Government Communications 338

Security Affairs

SEPTEMBER 29, 2018

. “Unlike the aforementioned IoT botnets, this one tries to be more stealthy and persistent once the device is compromised, and it does not (yet) do the usual stuff a botnet does like DDOS , attacking all the devices connected to the internet, or, of course, mining cryptocurrencies.” ” concludes the analysis.

IoT 275

IoT Communications Mining Encryption 275

Security Affairs

JUNE 26, 2024

Researchers warn that the P2Pinfect worm is targeting Redis servers with ransomware and cryptocurrency mining payloads. Cado Security researchers warned that the P2Pinfect worm is employed in attacks against Redis servers, aimed at deploying both ransomware and cryptocurrency mining payloads.

Ransomware 316

Ransomware Mining Passwords Access 316

OpenText Information Management

NOVEMBER 13, 2024

The energy and resources sector including utilities, oil and gas, chemicals, and metals & mining is one of the most hazardous in the world. Elevate customer communications with empathy during emergency response. Despite the hazardous nature, the safety performance has continually improved over the last 4 decades.

Energy and Utilities 104

Energy and Utilities Mining Communications Risk 104

Security Affairs

MARCH 11, 2023

The crypto-mining botnet has a modular structure and employs multiple techniques to infect systems and evade detection. Then the main module retrieves the actual crypto-mining payload and other modules, it also establishes persistence on the infected systems and ensure C2 communications.

Mining 246

Mining Communications Security IT 246

Security Affairs

JANUARY 15, 2019

Researchers from Trend Micro have analyzed the communication protocols used by cranes and other industrial machines and discovered several flaws. Security experts from Trend Micro have discovered several vulnerabilities in the communication protocols used by cranes, hoists, drills and other industrial machines.

Communications 237

Communications Mining Risk Manufacturing 237

Security Affairs

OCTOBER 26, 2020

It handles hundreds of bots, each communicating with the C&C to receive new targets, perform brute force attacks, install backdoors, and expand the size of the botnet.” ” reads the first part of two reports published by the experts detailing the DevOps implementation behind the botnet. .”

CMS 316

CMS Mining Communications Security 316

Security Affairs

FEBRUARY 24, 2023

This malware relies on the i2p (Invisible Internet Project) anonymization network for communication. The malicious code uses i2p to download malicious components and send mined currency to the attacker’s wallet. Today, many malicious applications continue to go undetected by most AV vendors.

Mining 246

Mining Passwords Communications Security 246

OpenText Information Management

JULY 9, 2024

Dig out trapped insights with text mining Traditional methods for gaining customer insights – like combing through 3rd-party review websites, Google Analytics, competitive research, and survey results – are slow and expensive. What is text mining? They also leave a lot of the good stuff buried because it’s too difficult to pull out.

Mining 72

Mining Analytics Information governance Communications 72

Security Affairs

JANUARY 18, 2019

The bug affected the OCA’s Diameter Signalling Router component and its Communications Services Gatekeeper. The critical patch advisory for 2019 also fixed the CVE-2018-11776 vulnerability in the OCA’s Communications Policy Management Component, this issue was exploited in 2018 by threat actors to mine cryptocurrency.

Financial Services 251

Financial Services Libraries Mining Retail 251

Security Affairs

JUNE 13, 2021

million customers impacted. million customers impacted.

Security 240

Security Data breaches Mining Ransomware 240

Security Affairs

OCTOBER 9, 2024

Such components could be interpreted as a subclass of AI agents responsible for orchestrating the communication workflow between the end user (consumer) and the AI. At some point, conversational AI platforms begin to replace traditional communication channels.

Communications 306

Communications Risk Cybersecurity Personal data 306

Security Affairs

APRIL 28, 2020

This directory contains the crypto mining module named kswapd0. This component has two main functions: Install a cryptoMiner worker: The main purpose of this elf file is the instantiation of a crypto-mining worker. It is a fork of XMRIG project, one of the most popular software to mine monero crypto values.

Mining 333

Mining File names Honeypots IT 333

Security Affairs

APRIL 26, 2021

The crypto-mining has a modular structure and employes multiple techniques to infect systems and evade detection. “The different components work together to enable the malware to perform many tasks: credential harvesting, spreading across the network, establishing C2 communications and more. ” concludes the report.

Mining 248

Mining Retail Insurance Manufacturing 248

Security Affairs

SEPTEMBER 4, 2018

Earlier August, experts uncovered a massive crypto jacking campaign that was targeting MikroTik routers to inject a Coinhive cryptocurrency mining script in the web traffic. Communication ports associated with the Winbox and Webfig are TCP/8291, TCP/80, and TCP/8080. CoinHive Mining Code Injection.

Mining 188

Mining Access Communications Security 188

Krebs on Security

MARCH 7, 2022

On June 6, 2021, Conti underling “ Begemot ” pitched Stern on a scheme to rip off a bunch of people mining virtual currencies, by launching distributed denial-of-service (DDoS) attacks against a cryptocurrency mining pool. Find a place where crypto holders communicate (discord, etc. ). Most likely it will be IPv6.

Ransomware 273

Ransomware Mining Blockchain Sales 273

Security Affairs

AUGUST 5, 2022

Dark Utilities is advertised as a platform to enable remote access, command execution, conduct distributed denial-of-service (DDoS) attacks and cryptocurrency mining operations on infected systems. Dark Utilities was launched in early 2022, the platform that provides full-featured C2 capabilities to its users. ” concludes the report.

Mining 246

Mining Communications Access Authentication 246

Security Affairs

DECEMBER 2, 2020

Evasion and Persistence: The botnet achieves persistence in multiple ways; kills running processes, potentially competing for mining tools and eliminates EDR. The Miner ELF binaries connect to the following mining proxy servers: 66.70.218.40:8080 It tries to infect hosts the system has connected to previously. 8080 and 134.122.17.13:8080.

Mining 346

Mining IoT Cloud Security 346

Security Affairs

JULY 28, 2018

The attackers compromised a font package installed by a PDF editor app and used it to spread a crypto-mining malware on victims’ machines. The attackers decompiled and modified one MSI file, an Asian fonts pack, to add the malicious payload with the coin mining code.

Mining 185

Mining Cloud Communications Marketing 185

eSecurity Planet

OCTOBER 22, 2024

The reliance on virtual meetings has skyrocketed after the pandemic, making platforms like Google Meet and Zoom integral to our daily personal and professional communication. Matanbuchus and XMRig: Used for cryptocurrency mining, these malware strains can slow down systems while surreptitiously utilizing computing resources.

Phishing 124

Phishing Communications Cybersecurity Mining 124

Security Affairs

SEPTEMBER 2, 2019

“I suspect it’s probably a derivate of other IoT crypto mining botnets,” Cashdollar told The Register. Additionally, the malware installs a shell script that uses to communicate with the command and control server. “This one seems to target enterprise systems.” It gain s persistence by adding entries to crontab.

IoT 278

IoT Honeypots Libraries Archiving 278

Security Affairs

JUNE 15, 2019

“In this new attack, the threat actor first externally scans a given IP range by sending a TCP SYN packet to port 2375, the default port used for communicating with the Docker daemon.” launching DDoS attacker, mining cryptocurrency, etc.). ” reads the analysis published by Trend Micro.

File names 279

File names Mining Access Communications 279