Data Breach Today

AUGUST 13, 2021

Images on Docker Hub Contained Cryptominers A recently uncovered cryptomining scheme used malicious Docker images to hijack organizations’ computing resources to mine cryptocurrency, according to the cybersecurity firm Aqua Security.

Mining 279

Mining Cybersecurity Security 279

Data Breach Today

DECEMBER 14, 2020

Researchers: 'PGMiner' Malware Uses Brute-Force Methods to Guess Passwords Researchers with Palo Alto Networks' Unit 42 are tracking a relatively new cryptomining botnet called "PGMiner," which is targeting PostgreSQL database servers to illegally mine for monero. Currently, the malware only targets Linux-based database servers.

Mining 279

Mining Passwords 279

Data Breach Today

JUNE 5, 2024

News Comes on Heels of Treasury Forcing Chinese Investors to Divest BianLian Shares Australian mining giant Northern Minerals says cybercriminals stole sensitive corporate secrets from its systems not long after the government forced several Chinese investors to divest their shares in the company.

Mining 255

Mining Ransomware Government IT 255

Data Breach Today

APRIL 24, 2020

The botnet's main purpose was mining monero cryptocurrency. ESET: 'VictoryGate' Infected 35,000 Devices VictoryGate, a recently discovered botnet that infected about 35,000 devices with malware, has been disabled by researchers from security firm ESET.

Mining 264

Mining Security 264

Security Affairs

AUGUST 5, 2021

The Uptycs Threat Research Team recently observed Golang-based worm dropping cryptominer binaries which use the MSR (Model Specific Register) driver to disable hardware prefetchers and increase the speed of the mining process by 15%. This is done to boost the miner execution performance, thereby increasing the speed of the mining process.

Mining 279

Mining Access IT Authentication 279

Security Affairs

APRIL 27, 2021

Cryptojacking malware allows threat actors to secretly mine for cryptocurrency abusing computational resources of the infected devices. The Intel TDT technology allows sharing heuristics and telemetry with security software that could use this data to detect the activity associated with a malicious code. Pierluigi Paganini.

Mining 283

Mining Manufacturing Security IT 283

Security Affairs

JANUARY 3, 2023

The Canadian Copper Mountain Mining Corporation (CMMC) was hit with a ransomware attack that impacted its operations. The Canadian Copper Mountain Mining Corporation (CMMC) announced to have suffered a ransomware attack late on December 27, 2022, which impacted its operation. . It is still unclear if there was a data breach.

Mining 246

Mining Ransomware Data breaches Risk 246

Data Breach Today

JULY 10, 2024

Remote Access Trojan 'Poco RAT' Targets Mining, Manufacturing Sectors, Says Report A new report published by Cofense Intelligence identifies a malware called "Poco RAT" that is actively targeting mining and manufacturing sectors across Latin America through a simple remote access Trojan that could be capable of delivering additional malware for ransomware (..)

Mining 182

Mining Manufacturing Ransomware Access 182

Security Affairs

FEBRUARY 18, 2021

PaloAlto Network warns of the WatchDog botnet that uses exploits to take over Windows and Linux servers and mine cryptocurrency. 27, 2019 and already mined at least 209 Monero (XMR), valued to be around $32,056 USD. Redis Spring Data Commons CVE-2018-1273, versions prior to 1.13-1.13.10, x before 1.4.3) 1.13.10, 2.0-2.0.5

Mining 363

Mining Cloud Access Security 363

Security Affairs

AUGUST 30, 2024

Threat actors are actively exploiting a critical flaw in the Atlassian Confluence Data Center and Confluence Server in cryptocurrency mining campaigns. in the Atlassian Confluence Data Center and Confluence Server is being actively exploited for cryptojacking campaigns. Data Center only), and 8.7.1 Data Center only).

Mining 343

Mining Cloud Risk Security 343

Krebs on Security

JULY 23, 2020

“Remarkably, Respondent instead allowed unfettered access to the personal and financial data of millions of its customers for six more months until the breach and its serious ramifications were widely publicized by a nationally recognized cybersecurity industry journalist,” the DFS explained in a statement on the charges.

Insurance 347

Insurance Financial Services Mining Access 347

Security Affairs

JANUARY 10, 2021

The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs. The malware deploys the XMRig mining tool to mine Monero cryptocurrency. The malicious scripts are being developed to steal more sensitive data such as credentials. aws/credentials and ~/.aws/config

Mining 362

Mining Metadata Authentication Security 362

Data Breach Today

MAY 18, 2020

Likely Connected: Attacks Against Systems in US, UK, China, Germany and Beyond Cryptocurrency-mining hackers appear to be behind a recent spate of supercomputer and high-performance computing system intrusions. But it's unclear if attackers might also have had data-stealing or espionage intentions.

Mining 312

Mining IT 312

Security Affairs

JANUARY 14, 2024

million) worth of cryptocurrencies via mining activities. “The suspect is believed to have mined over USD 2 million (EUR 1.8 ” An unnamed cloud service provider supported the investigation for months. “The suspect is believed to have mined over USD 2 million (EUR 1.8 million) in cryptocurrencies.”

Mining 338

Mining Cloud Access Authentication 338

Security Affairs

FEBRUARY 24, 2021

Security experts from Akamai have spotted a new botnet used for illicit cryptocurrency mining activities that are abusing Bitcoin (BTC) transactions to implement a backup mechanism for C2. The operators of a long-running crypto-mining botnet campaign began creatively disguising their backup C2 IP address on the Bitcoin blockchain.”

Blockchain 342

Blockchain Mining Honeypots Security 342

Security Affairs

AUGUST 29, 2019

card issuer and financial corporation suffered a data breach that exposed personal information from 106 million Capital One credit applications. THOMPSON used this access not only to steal data, but also used stolen computer power to “mine” cryptocurrency for her own benefit, a practice known as “ cryptojacking.””

Mining 264

Mining Cloud Data breaches Access 264

Security Affairs

JANUARY 17, 2020

The FBI has seized the WeLeakInfo.com websites for selling subscriptions to data that were exposed in data breaches. WeLeakInfo.com is a data breach notification service that allows its customers to verify if their credentials been compromised in data breaches. SecurityAffairs – WeLeakInfo, data breach).

Data breaches 242

Data breaches Access Mining Archiving 242

Security Affairs

JULY 7, 2022

Researchers uncovered a large-scale cryptocurrency mining campaign targeting the NPM JavaScript package repository. Checkmarx researchers spotted a new large-scale cryptocurrency mining campaign, tracked as CuteBoi , that is targeting the NPM JavaScript package repository. ” concludes the experts. Pierluigi Paganini.

Mining 345

Mining Security IT Information Security 345

Security Affairs

OCTOBER 4, 2023

Atlassian fixed a critical zero-day flaw in its Confluence Data Center and Server software, which has been exploited in the wild. Software giant Atlassian released emergency security updates to address a critical zero-day vulnerability, tracked as CVE-2023-22515 (CVSS score 10), in its Confluence Data Center and Server software.

Mining 357

Mining Access Authentication Cloud 357

Data Breach Today

FEBRUARY 4, 2021

The malicious code is likely the work of the TeamTNT hacking group, which mines for monero cryptocurrency. Researchers: 'Hildegard' Linked to TeamTNT Hacking Group A previously undocumented malware variant called "Hildegard" is targeting Kubernetes clusters, according to Palo Alto Networks' Unit 42.

Mining 346

Mining 346

Security Affairs

OCTOBER 23, 2021

CISA warned of crypto-mining malware hidden in a popular JavaScript NPM library, named UAParser.js, which has millions of weekly downloads. Cybersecurity and Infrastructure Security Agency published an advisory to warn of the discovery of a crypto-mining malware in the popular NPM Package UAParser.js. ” reads the advisory.

Mining 363

Mining Libraries Cybersecurity Security 363

Security Affairs

JANUARY 25, 2021

. “These particular applications are targeted because they often run on systems that have powerful underlying hardware with significant amounts of memory and powerful CPUs—all of which allow threat actors to maximize their ability to monetize these resources through mining cryptocurrency.” Ransomware, data theft).

Mining 363

Mining Passwords Communications Ransomware 363

Data Breach Today

JANUARY 4, 2021

Researchers Say Recently Uncovered Malware Targets Windows and Linux Researchers at the security firm Intezer have detected a new Golang-based worm that is targeting Windows and Linux servers with monero cryptomining malware.

Mining 227

Mining Security 227

Security Affairs

FEBRUARY 15, 2019

“As soon as the apps are downloaded and launched, they fetch a coin-mining JavaScript library by triggering Google Tag Manager (GTM) in their domain servers. The mining script then gets activated and begins using the majority of the computer’s CPU cycles to mine Monero for the operators.”

Mining 278

Mining Libraries Analytics Security 278

Data Breach Today

NOVEMBER 12, 2020

Researchers: Malware Leverages Vulnerabilities to Mine Cryptocurrency The Muhstik botnet, which has been operating for at least two years, has recently started targeting vulnerabilities in the Oracle WebLogic application server and the Drupal content management system as a way to expand its cryptocurrency mining capabilities, according to security (..)

Mining 283

Mining Security IT 283

Data Breach Today

JANUARY 22, 2021

Researchers Say It Hijacks Powerful Computer Systems to Mine Monero Zscaler's ThreatLabz research team is tracking a new botnet dubbed DreamBus that's installing the XMRig cryptominer on powerful, enterprise-class Linux and Unix systems with the goal of using their computing power to mine monero.

Mining 276

Mining IT 276

Security Affairs

JANUARY 26, 2023

The BlackCat Ransomware group claims to have hacked SOLAR INDUSTRIES INDIA and to have stolen 2TB of “secret military data.” The BlackCat Ransomware group claims to have breached the company infrastructure and to have stolen 2TB of data, including secret military data related to weapons production.

Military 246

Military Manufacturing Ransomware Mining 246

Data Breach Today

SEPTEMBER 18, 2020

The malware is being used to launch DDoS attacks as well as mine for cryptocurrency. IBM: P2P Botnet Now Accounts for 90% of IoT Network Traffic Mozi, a relatively new peer-to-peer botnet, is now dominating global IoT network traffic, according to a new report from IBM's X-Force unit.

IoT 325

IoT Mining 325

Security Affairs

MARCH 28, 2022

Link to the stolen data from the company have been published on the leak site DDoSecrets. Anonymous also hacked MashOiL and leaked the data through DDoSecrets. The dump includes nearly 140,000 emails from MashOil, which designs, manufactures and maintains equipment used in the drilling, mining and fracking industries.

Mining 246

Mining Manufacturing Government IT 246

Data Breach Today

JUNE 6, 2022

Cysiv's Cloud-Native Data Analytics Will Help OT and IoT Customers Address Threats Forescout has agreed to purchase startup Cysiv to help OT and IoT customers analyze, detect and respond to threats using cloud-native data analytics.

IoT 246

IoT Mining Analytics Cloud 246

Troy Hunt

NOVEMBER 13, 2024

Apparently, before a child reaches the age of 13, advertisers will have gathered more 72 million data points on them. I knew I'd seen a metric about this sometime recently, so I went looking for "7,000", which perfectly illustrates how unaware we are of the extent of data collection on all of us. Does it matter?

Data breaches 119

Data breaches Passwords B2B Healthcare 119

Security Affairs

DECEMBER 25, 2021

The resource contains information for the mining activity, the researchers identified a self-compiled version of the XMrig open-source miner containing information such as username, password, algorithm, and mining pool.

Mining 307

Mining Passwords IT Security 307

Data Breach Today

OCTOBER 26, 2020

Researchers Say Botnet Mines for Cryptocurrency and Sends Spam Security researchers at Imperva have uncovered a botnet that attacks vulnerabilities in websites' underlying content management systems and then uses these compromised servers to mine for cryptocurrency or send spam to more victims.

Mining 264

Mining Security 264

Security Affairs

APRIL 1, 2020

Cybersecurity researchers spotted a crypto-mining botnet, tracked as Vollgar, that has been hijacking MSSQL servers since at least 2018. Researchers at Guardicore Labs discovered a crypto-mining botnet , tracked as Vollgar botnet , that is targeting MSSQL databases since 2018. ” conclude the experts.

Mining 353

Mining Passwords Education Cybersecurity 353

Security Affairs

JANUARY 23, 2021

Sophos researchers that investigated the recently uncovered crypto-mining campaign targeting SQL servers with MrbMiner malware believe that it was conducted by an Iran-based company. The malicious payload was designed to target Windows systems, but experts also found a Linux build of the miner on several servers they analyzed.

Mining 354

Mining Communications Access Privacy 354

Security Affairs

JANUARY 3, 2023

The RAT supports the following capabilities: Data exfiltration. Monero mining. While investigating multiple lures for BitRAT, the researchers discovered that a threat actor had hijacked the IT infrastructure of a Columbian cooperative bank and likely gained access to customers’ data. Execution of payloads with bypasses.

Phishing 246

Phishing Mining Access IT 246

Data Breach Today

APRIL 25, 2021

Cybereason Says Russian Hacking Group Prometei is Behind the Campaign A Russian botnet group called Prometei is exploiting critical Microsoft Exchange Server vulnerabilities to mine cryptocurrency from various organizations across the world, a new report by security firm Cybereason finds. The group appears to be financially-motivated.

Mining 306

Mining Security 306