Your systems, their profit: How IT rights can be abused for shadow mining of cryptocurrency

guest · Mar 2, 2019

Your systems, their profit: How IT rights can be abused for shadow mining of cryptocurrency
March 1, 2019
https://www.techrepublic.com/articl...e-abused-for-shadow-mining-of-cryptocurrency/

One emerging trend is "shadow mining," the use of IT resources inside one's organization to covertly mine for cryptocurrencies, according to an Exabeam research report published Friday.

"To be successful and remain undetected, an insider threat such as shadow mining depends on deliberately configuring security systems to function incorrectly," the report states. "This scenario not only makes an organization less secure, but by introducing software that consumes additional resources and increasing its attack surfaces, shadow mining can be said to make affected computers less reliable."

With the barrier to entry to cryptocurrency mining lowered to the point that people other than IT professionals can get started, the potential for shadow mining to be a problem clearly exists. The report concludes that "a sufficiently knowledgeable person could be much more effective in hiding their mining efforts. [...]"
Click to expand...

The Anatomy of Shadow Mining (PDF - 1.20 MB): http://www.exabeam.com/wp-content/uploads/2019/02/The-Anatomy-of-Shadow-Mining-Research-Report-022719.pdf

guest · Apr 2, 2019

Exabeam Survey Shows Many Organizations in the Dark About Shadow Mining Cybersecurity Threat
April 2, 2019
https://www.exabeam.com/pr/exabeam-...ark-about-shadow-mining-cybersecurity-threat/

Exabeam, the Smarter SIEM™ company, today announced the results of a survey that revealed the majority of organizations are overlooking the threat of shadow mining, with 65 percent of organizations unfamiliar with the term and more than half (57 percent) unfamiliar with the wider-but-related threat of cryptojacking.

Out of 150 cybersecurity professionals surveyed in March 2019 at the Cloud and Cybersecurity Expo 2019 in London, almost half (47 percent) are not confident they have the security policies and tools in place to detect and prevent illicit cryptocurrency mining activity occurring on their organization’s network infrastructure.

The study also highlighted a lack of awareness for cryptojacking and shadow mining compared to other common cybersecurity threats. Ransomware (40 percent) and bring your own device (BYOD) threats (28 percent) were cited as the two most common IT security challenges facing organizations. Shadow mining (10 percent) and cryptojacking (9 percent) were rarely cited.
“It is eye-opening to learn that so many professionals still see their biggest IT threats coming from outside of their organizations,” said Barry Shteiman, VP, Research and Innovation at Exabeam.
Click to expand...

Log in or Sign up

Your systems, their profit: How IT rights can be abused for shadow mining of cryptocurrency

guest Guest

guest Guest

Log in or Sign up

Your systems, their profit: How IT rights can be abused for shadow mining of cryptocurrency

guest Guest

guest Guest

Useful Searches