Cyberbit discovers international airport riddled with Bitcoin-mining

guest · Oct 16, 2019

Cyberbit discovers international airport riddled with Bitcoin-mining
October 16, 2019
https://www.zdnet.com/article/cyber...-airport-riddled-with-bitcoin-mining-malware/

Cyberbit says its computer security software helped uncover a large infection of cryptocurrency mining software at an unnamed "international airport in Europe" where the majority of workstations were infected with active malware.

The company won't name its client but in a blog post, its researchers said that standard types of anti-virus software would have failed to catch the crypto-miners, including the system the airport had deployed on its network.
The discovery of the infected international airport creates the question: how many more international airports have unknown malware?

A crypto-miner stealing compute cycles from an airport IT system has potential widespread repercussions in a large region and beyond. Airport information systems could slowdown and maybe fail, creating chaos among departing and arriving passengers, and many other problems.
Click to expand...

Cyberbit: Cryptocurrency Miners Now Using Evasive Tactics to Exploit Airport Resources

guest · Oct 21, 2019

Major Airport Malware Attack Shines a Light on OT Security
October 18, 2019
https://threatpost.com/major-airport-malware-attack-ot-security/149330/

Researchers at Cyberbit found the XMRig Monero mining malware, which was a known strain called “Playerz,” but which skated by antivirus solutions on the endpoints by adding a new tweak.

“The modification was really simple: the MD5 was modified, however, the attacker kept the use of the original tools and even the original file names…which is an indication of simple modification, nevertheless this was sufficient to evade most AV products,” he told Threatpost.
“We see growing usage of cryptominers in recent attacks and we see a trend to switch from ransomware to mining,” he told Threatpost. “Since ransomware attacks are more visible by nature they tend to ‘burn down’ faster. In this specific attack the malware was active for months without any indication.”

While in this case the attackers were looking to mine Monero cryptocurrency, the fact they were able to infiltrate the network remotely and spread laterally to 50 percent of all workstations – while remaining hidden – is alarming, Brown said – especially given the unique security issues and threat surfaces present at airports.

“This likely indicates a sophisticated threat actor, as well as subpar state of security,” he told Threatpost. He added that airports tend to be specifically vulnerable thanks to the common presence of legacy technology and industry-specific software.
Click to expand...

Log in or Sign up

Cyberbit discovers international airport riddled with Bitcoin-mining

guest Guest

guest Guest

Log in or Sign up

Cyberbit discovers international airport riddled with Bitcoin-mining

guest Guest

guest Guest

Useful Searches