Security Affairs

AUGUST 30, 2024

Threat actors are actively exploiting a critical flaw in the Atlassian Confluence Data Center and Confluence Server in cryptocurrency mining campaigns. Trend Micro researchers observed this vulnerability being actively exploited for cryptomining activities, with a surge in exploitation attempts from mid-June to the end of July 2024.

Mining 343

Mining Cloud Risk Security 343

Data Breach Today

FEBRUARY 12, 2018

and Australian governments, have been turning their visitors' computers into mining machines to harvest the virtual currency Monero. The security lapse continues the recent trend of cryptocurrency mining malware overtaking ransomware.

Mining 150

Mining Government Ransomware Security 150

Security Affairs

JULY 24, 2018

” It only took one month from this warning until researchers at Trend Micro identified suspicious port scans on TCP port 5555. ” The Trend Micro researchers’ analysis shows a fairly typical command & control (C&C) malware infection process with many similarities to the Satori variant of the Mirai botnet.

Mining 177

Mining IoT Blockchain Risk 177

Security Affairs

NOVEMBER 16, 2018

According to Group-IB’s report findings, Asia is one of the most actively attacked regions in the world, the company presented latest cybercrime trends. Cyber trends and threats that we identified in the world are likely to occur in Asia. Increasingly often, state-sponsored hackers are focusing on vulnerabilities in home routers.

Phishing 272

Phishing Manufacturing Marketing Blockchain 272

Security Affairs

APRIL 23, 2021

Researchers from Trend Micro have spotted a new Linux botnet employing multiple emerging techniques among cyber-criminals, including the use of Tor proxies, the abuse of legitimate DevOps tools, and the removal or deactivation of competing malware. ” reads the analysis published by Trend Micro. for spreading.

Mining 344

Mining File names Security IT 344

Security Affairs

SEPTEMBER 30, 2021

Trend Micro researchers have spotted crypto-mining campaigns that are actively exploiting a recently disclosed critical remote code execution vulnerability in Atlassian Confluence deployments across Windows and Linux. ” states Trend Micro. ” states Trend Micro. Pierluigi Paganini.

Mining 288

Mining Authentication Marketing Security 288

Security Affairs

JUNE 1, 2019

A new cryptojacking campaign was spotted by experts at Trend Micro, crooks are using Shodan to scan for Docker hosts with exposed APIs. ” reads the analysis published by Trend Micro. “The script then calls a Monero coin-mining binary, darwin (detected as PUA.Linux.XMRMiner.AA), to run in the background.

Mining 279

Mining Honeypots Cloud Passwords 279

Security Affairs

MAY 3, 2024

Trend Micro researchers reported that the EdgeRouter botnet , called Moobot , used by the APT28 group is still active and is also used by cyber criminal organizations. Trend Micro also discovered that at least two prominent cybercriminal groups and the Russia-linked APT group Pawn Storm used the botnet. ” reported Trend Micro.

Healthcare 315

Healthcare Phishing Mining e-Discovery 315

Security Affairs

AUGUST 18, 2020

The TeamTNT botnet is a crypto-mining malware operation that has been active since April and that targets Docker installs. The activity of the TeamTNT group has been detailed by security firm Trend Micro, but the new feature was added only recently. It’s the first worm we’ve seen that contains such AWS specific functionality.

Mining 308

Mining Security Access IT 308

Security Affairs

OCTOBER 28, 2018

Cybercriminals continue to abuse unprotected Docker APIs to create new containers used for cryptojacking, Trend Micro warns. Earlier this year Sysdig and Aqua Security researchers started observing cyber attacks targeting Kubernets and Docker instances aimed at mining Monero cryptocurrency.

Mining 275

Mining Systems administration Encryption Authentication 275

Security Affairs

DECEMBER 21, 2021

An early version of the bot was initially documented in October by Trend Micro researchers. The bot also kills competing malware, including crypto mining and cloud-focused malware, on the same systems. The sample also downloads one of the additional ELF binary payloads observed by Trend Micro and saves it as “abchello”.”

Cloud 363

Cloud Mining Access Security 363

Security Affairs

OCTOBER 4, 2023

action in network access logs presence of /setup/setupadministrator.action in an exception message in atlassian-confluence-security.log in the Confluence home directory In September 2022, threat actors were observed targeting unpatched Atlassian Confluence servers as part of an ongoing crypto mining campaign.

Mining 357

Mining Access Authentication Cloud 357

Security Affairs

OCTOBER 16, 2023

From July to September, researchers from Trend Micro observed a malicious campaign DarkGate campaign abusing instant messaging platforms to deliver a VBA loader script to victims. ” continues Trend Micro. Moreover, the sample that abused Teams came from an unknown, external sender.” ” concludes the report.

Mining 345

Mining Ransomware Access IT 345

Security Affairs

DECEMBER 12, 2022

Researchers spotted a cryptocurrency mining campaign targeting Linux users with Go-based CHAOS malware (Trojan.Linux.CHAOSRAT). In November 2022, Trend Micro researchers discovered a cryptocurrency mining campaign targeting Linux users with Go-based CHAOS malware (Trojan.Linux.CHAOSRAT). Gather operating system information.

Mining 256

Mining Cloud Security IT 256

Security Affairs

FEBRUARY 10, 2019

Security experts from Trend Micro have discovered a new strain of coin miner that targets the Linux platform and installs the XMR-Stak Cryptonight cryptocurrency miner. ” reads the analysis published by Trend Micro. ” concludes Trend Micro. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Honeypots 279

Honeypots Mining Security IT 279

Data Breach Today

JANUARY 16, 2019

Trend Micro Says It Moved Cranes Using RF Software Flaws Radio controllers used in the construction, mining and shipping industries are dangerously vulnerable to hackers, Trend Micro says in a new report.

Mining 222

Mining Manufacturing Security Communications 222

Security Affairs

JUNE 22, 2019

Trend Micro recently discovered an Android crypto-currency mining botnet that can spread via open ADB (Android Debug Bridge) ports and Secure Shell (SSH). Security researchers at Trend Micro have discovered an new Android crypto-currency mining botnet that spreads via open ADB ( Android Debug Bridge ) ports and Secure Shell (SSH).

Mining 250

Mining Honeypots Authentication Communications 250

Security Affairs

NOVEMBER 11, 2018

Researchers from Trend Micro spotted a new cryptocurrency miner that leverages a rootkit component to hide its presence on the infected systems. “We recently encountered a cryptocurrency-mining malware (detected by Trend Micro as Coinminer.Linux.KORKERDS.AB) affecting Linux systems,” reads the report published by TrendMicro. .

Mining 278

Mining IT Security 278

Security Affairs

JANUARY 10, 2022

Experts linked the C2 infrastructure behind an the Abcbot botnet to a cryptocurrency-mining botnet attack that was uncovered in December 2020. Experts linked the infrastructure used by the Abcbot DDoS botnet to the operations of a cryptocurrency-mining botnet that was uncovered in December 2020.

Mining 279

Mining Honeypots Cloud Security 279

Security Affairs

SEPTEMBER 9, 2021

The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs. Experts pointed out that even if the group is expanding its arsenal adding new capabilities, it still focuses on cryptocurrency mining. ” reads the analysis published by AT&T.

Mining 307

Mining IT Cloud Security 307

Security Affairs

FEBRUARY 5, 2021

Early this year, researchers from Trend Micro discovered that the TeamTNT botnet was improved with the ability to steal Docker credentials. The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs. aws/credentials and ~/.aws/config aws/credentials and ~/.aws/config

Mining 300

Mining Libraries Encryption Access 300

Security Affairs

JANUARY 28, 2021

Early this year, researchers from Trend Micro discovered that the TeamTNT botnet was improved with the ability to steal Docker credentials. The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs.

Libraries 355

Libraries IT Mining Security 355

Security Affairs

MARCH 20, 2024

Trend Micro researchers are exploiting the recently disclosed vulnerabilities CVE-2024-27198 (CVSS score: 9.8) ” reads the report published by Trend Micro. In other instances analyzed by Trend Micro, threat actors deployed a variant of the open-source XMRig cryptocurrency-mining malware to vulnerable TeamCity servers.

Authentication 342

Authentication Ransomware Mining Risk 342

Security Affairs

NOVEMBER 9, 2021

Trend Micro researchers reported that TeamTNT hackers are targeting poorly configured Docker servers exposing Docker REST APIs as part of an ongoing campaign that started in October. ” reads the analysis published by Trend Micro. . ” reads the analysis published by Trend Micro. ” continues the analysis.

Mining 292

Mining Security IT Information Security 292

Security Affairs

APRIL 22, 2022

The Lemon_Duck cryptomining botnet is targeting Docker servers to mine cryptocurrency on Linux systems. Crowdstrikes researchers reported that the Lemon_Duck cryptomining botnet is targeting Docker to mine cryptocurrency on Linux systems. “The “a.asp” file is the actual payload in this attack. ” concludes the report.

Mining 246

Mining Access Cloud Cybersecurity 246

Security Affairs

JUNE 5, 2019

Security experts at Trend Micro have discovered a new Monero cryptomining miner, dubbed BlackSquid, that is targeting web servers, network drives, and removable drives. ” states Trend Micro. “Simultaneous with its attacks, BlackSquid also downloads and executes two XMRig cryptocurrency-mining components.!

Mining 233

Mining File names Libraries IT 233

Security Affairs

JUNE 15, 2019

” reads the analysis published by Trend Micro. launching DDoS attacker, mining cryptocurrency, etc.). In the campaign observed by Trend Micro, the bot was deployed using the docker exec command to misconfigured containers. “Once an open port is identified, a connection asking for running containers is established.

File names 279

File names Mining Access Communications 279

Security Affairs

JULY 11, 2024

“Threat actors continued the speedy-time-from-disclosure-to-exploitation trend and were quick to leverage this new vulnerability — we observed exploit attempts targeting this PHP flaw on our honeypot network within 24 hours of its disclosure.” ” reported Akamai. The script also cleans up the temporary files for obfuscation.

Honeypots 347

Honeypots File names Mining IoT 347

Security Affairs

MAY 17, 2022

Trend Micro researchers spotted over 200 Android apps on the Play Store distributing spyware called Facestealer used to steal sensitive data from infected devices. Trend Micro researchers also discovered 40 fake cryptocurrency miner apps that are variants of similar apps that they discovered in August 2021.

Mining 246

Mining Cloud Cybersecurity Security 246

Security Affairs

SEPTEMBER 17, 2019

Trend Micro researchers spotted a piece of Linux cryptocurrency miner, dubbed Skidmap that leverages kernel-mode rootkits to evade the detection. Skidmap is a new piece of crypto-miner detected by Trend Micro that target Linux machines, it uses kernel-mode rootkits to evade the detection. ” Trend Micro concludes.

Access 266

Access Passwords Authentication Mining 266

Security Affairs

AUGUST 28, 2020

The Lemon_Duck cryptomining malware was first spotted in June 2019 by researchers from Trend Micro while targeting enterprise networks. “This aspect of the campaign expands the mining operation to support computers running Linux. Upon infecting a device, the malware delivers an XMRig Monero (XMR) miner.

Mining 363

Mining Passwords Authentication Access 363

Security Affairs

JUNE 3, 2022

In September 2021, Trend Micro researchers spotted crypto-mining campaigns that were actively exploiting a recently disclosed critical remote code execution vulnerability in Atlassian Confluence deployments across Windows and Linux.

Mining 363

Mining Authentication Security Cybersecurity 363

Security Affairs

JANUARY 15, 2019

Researchers from Trend Micro have analyzed the communication protocols used by cranes and other industrial machines and discovered several flaws. Security experts from Trend Micro have discovered several vulnerabilities in the communication protocols used by cranes, hoists, drills and other industrial machines.

Communications 238

Communications Mining Risk Manufacturing 238

Security Affairs

JANUARY 31, 2021

to mine Monero, unlike 2019 variant, it uses a Python infection script to implement “wormable” capabilities. “Cryptojacking malware targeting the cloud is evolving as attackers understand the potential of that environment to mine for crypto coins. ” continues the analysis. Pro-Ocean deploys an XMRig miner 5.11.1

Cloud 303

Cloud Libraries Mining IT 303

Security Affairs

APRIL 26, 2019

.” Experts observed a spike in the activity of Beapy in March: Since Coinhive cryptocurrency mining service shut down in March, experts observed a drop in cryptojacking attacks. Unlike Coinhive, Beapy is a file-based miner that must be installed by attackers on the victims’ machines in order to mine cryptocurrency.

Mining 227

Mining Archiving Phishing Passwords 227

Security Affairs

NOVEMBER 18, 2020

bin, researchers also observed the use of a cryptocurrency mining module. . Upon connecting to the command-and-control server, the malware downloads the first malicious payload in the form of a.msi file, which deploys a.vbs file used to execute other processes, as well as uninstall.dll and engine.bin. SecurityAffairs – hacking, malware).

Phishing 334

Phishing Mining Libraries Encryption 334

Security Affairs

FEBRUARY 19, 2019

As stated in a recent Eset report , the Shade infection had an increase during October 2018, keeping a constant trend until the second half of December 2018, taking a break around Christmas, and then resuming in mid-January 2019 doubled in size (shown in Figure 1). Trend of malicious JavaScript downloading Shade ransomware (source: ESET).

Ransomware 250

Ransomware Mining File names Encryption 250