Hackers Using Monero Mining Malware as Decoy, Warns Microsoft

SophosLabs has published a report on how hackers are distributing a new mining malware across the web. The Mal/Miner-C malware hijacks a computer and allows malicious individuals to mine Monero with the victim’s processing power. SophosLabs Researches a New Exploit That Borrows CPU Power to Mine Monero. A new paper, authored by Attila Marosi, details how....

The privacy-centric crypto asset monero has seen significant gains during the last two weeks, jumping 36% in value against the U.S. dollar. Despite the negative press from the “Spider-Man: No Way Home” torrents with monero mining malware, seven-day statistics indicate the crypto asset has gained more than 21%. Monero Sees Double-Digit Gains Amid Mining Malware Headlines The privacy-focused digital currency monero (XMR) has seen double-digit gains this week, while most of the crypto economy has suffered losses and seen a period of consolidation. Just recently, XMR made....

A “significant” decoy selection bug has been reported for Monero via the project’s official Twitter handle. According to the investigation, carried out by software developer Justin Berman, the bug “may impact your transaction’s privacy” during a brief window of time after funds have been received. If users spend funds immediately following the lock time in the first 2 blocks allowable by consensus rules (~20 minutes after receiving funds), then there is a good probability that the output can be identified as the true spend. Monero Research Lab clarified....

AsNAS systems are being targeted, criminals seem to prefer to exploit the Seagate Central Network Attached Storage. Over the past few years, there have been multiple versions of malware causing harm to computer users. But some of these tools will also attempt to mine cryptocurrency on behalf of the criminal. Several new types of crypto mining malware have been discovered recently, all of which target NAS servers. Not the most profitable way of mining cryptocurrency, but since it is entirely free for the criminal, it is worth a shot. The new report released by SophosLabs goes to show....

The malware campaign has not been active since it was first detected in January, leading researchers to believe that it "may still be in the reconnaissance and weaponization stage." Cybersecurity researchers at Unit 42, the intelligence team at Paolo Alto Networks, have published a profile of a new malware campaign that targets Kubernetes clusters and can be used for the purposes of cryptojacking."Cryptojacking" is an industry term for stealth crypto-mining attacks that work by installing malware that uses a computer’s processing power to mine cryptocurrencies — frequently Monero (XMR) —....