Massive cryptocurrency botnet used leaked NSA exploits weeks before WCry Campaign

Discussion in 'other security issues & news' started by hawki, May 16, 2017.

  1. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,078
    Location:
    DC Metro Area
    "Massive cryptocurrency botnet used leaked NSA exploits weeks before WCry

    Campaign that flew under the radar used hacked computers to mine Monero currency..."

    https://arstechnica.com/security/20...t-used-leaked-nsa-exploits-weeks-before-wcry/

    "..."This attack is ongoing and, while less flashy than WannaCry, is nonetheless quite large and potentially quite disruptive," Kafeine continued, adding: "Symptoms of this attack include loss of access to shared Windows resources and degradation of PC and server performance.

    'Several large organisations reported network issues this morning that were originally attributed to the WannaCry campaign. However, because of the lack of ransom notices, we now believe that these problems might be associated with Adylkuzz activity.'

    http://www.ibtimes.co.uk/larger-wan...sed-spread-cryptocurrency-mining-tool-1621821
     
  2. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,078
    Location:
    DC Metro Area
    Some additional info. RE: Adylkuzz:

    "Botnet using NSA's exploits could grow bigger than WannaCry

    The Adylkuzz malware spreads the same way the WannaCry ransomware does, but it's sneakier...

    Instead of serving ransomware and locking up computers while demanding victims pay up, Adylkuzz turns devices into slaves for its botnet army. Hundreds of thousands of infected computers are effectively turned into zombies mining for Monero, a cryptocurrency similar to Bitcoin, according to cybersecurity researchers at Proofpoint...

    It spreads through EternalBlue, ... Once Adylkuzz is in a computer's system, it downloads instructions, a cryptominer and cleanup tools...

    The virus hides in the background, so most victims wouldn't even know they've been hacked. The symptoms include slowed down performance in PCs and loss of access to certain Windows resources. In one case, a hacker made up to $22,000 before the mining bot was booted...

    'While an individual laptop may generate only a few dollars per week, collectively the network of compromised computers appears to be generating five-figure payouts daily,' said Ryan Kalember, Proofpoint's senior vice president of cybersecurity strategy..."

    https://www.cnet.com/news/botnet-using-nsas-exploits-could-grow-bigger-than-wannacry/
     
  3. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
  4. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,078
    Location:
    DC Metro Area
    Last edited: May 17, 2017
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.