Beapy/PCASTLE – Worm-Cryptominer Combo Lets You Game While Using NSA Exploits to Move Laterally

guest · Aug 20, 2019

Worm-Cryptominer Combo Lets You Game While Using NSA Exploits to Move Laterally
August 20, 2019
https://labs.bitdefender.com/2019/0...e-while-using-nsa-exploits-to-move-laterally/

Bitdefender researchers recently found and analyzed a worm-cryptominer combo that uses a series of exploits to move laterally and compromise victims. What makes it interest is that it pauses the resource-intensive cryptomining process if it finds popular games running on the victim’s machine.
Some of its modules were updated to make it difficult for security researchers to analyze it, as well as improve lateral movement and other capabilities.

Dubbed Beapy/PCASTLE by previous security researchers, Bitdefender takes a deeper dive into the behavior of the worm-cryptominer combo, offering a detailed changelog into how its modules and components have been updated over time. The Bitdefender investigation reveals how the worm and malware components have been used in conjunction to spread and mine cryptocurrency.

A new attack vector, not previously associated with delivering cryptocurrency miners or covered in past research, was also revealed during the investigation.
Click to expand...

White paper: (PDF - 5.33 MB): https://www.bitdefender.com/files/News/CaseStudies/study/280/Bitdefender-WhitePaper-Worm-Cryptominer-Beapy-PCASTLE.pdf

Log in or Sign up

Beapy/PCASTLE – Worm-Cryptominer Combo Lets You Game While Using NSA Exploits to Move Laterally

guest Guest

Log in or Sign up

Beapy/PCASTLE – Worm-Cryptominer Combo Lets You Game While Using NSA Exploits to Move Laterally

guest Guest

Useful Searches