News Coin Stealer Found in Monero Linux Binaries From Official...

Coin Stealer Found in Monero Linux Binaries From Official Site

-

- Advertisment -

The Monero Project is currently investigating a potential compromise of the official website after a coin stealer was found in the Linux 64-bit command line (CLI) Monero binaries downloaded from the download page.

“CLI binaries available on http://getmonero.org  may have been compromised at some point during the last 24h. Investigations ongoing,” the Monero team said on Twitter.

As reported and confirmed by multiple users on GitHubReddit and Twitter, the Monero website delivered potentially malicious binaries with not matching hashes a little over 30 minutes. At the moment all binaries are clean as they are currently delivered from a secure fallback hosting server.

Users are encouraged by moderators on the Monero subreddit to “check the integrity of the binaries and verify that they were signed by Fluffypony’s GPG key.”

Guides on how to check if the downloaded binaries have the corrected hashes are available for Windows here and for Linux and macOS here.

Although Windows and macOS files haven’t been reported to be compromised, users of all platforms should check the hashes for all downloaded Monero binaries since all of them could’ve been switched with malicious versions.

Correct hashes for all Monero binaries available for download on the official site are here: https://web.getmonero.org/downloads/hashes.txt.

If you downloaded binaries in the last 24h, and did not check the integrity of the files, do it immediately. If the hashes do not match, do NOT run what you downloaded. If you have already run them, transfer the funds out of all wallets that you opened with the (probably malicious) executables immediately, using a safe version of the Monero wallet (the one online as we speak is safe — but check the hashes). More information will be posted as several people are currently investigating to get to the bottom of this. – Monero Core Team

Malicious binaries drop a coin stealer

While a full analysis of the malicious Monero binaries that were distributed through the project’s official download platform is not yet available, security researcher and contributor to the Monero project SerHack says that he was able to find a coin stealer embedded within.

“I can confirm that the malicious binary is stealing coins. Roughly 9 hours after I ran the binary a single transaction drained the wallet,” moneromanz, one of the users who downloaded the compromised Monero binaries, confirmed. “I downloaded the build yesterday around 6pm Pacific time.”

“I have not completed any malware analysis as of yet, but I’d like to get to the bottom of whether the binary is limited to stealing xmr, or also tries to compromise the machine as a whole or any of its files,” he adds.

The malicious binaries downloaded from the official Monero website during the approximately 30 minutes window were also uploaded by moneromanz to an anonymous file hosting server and are available for analysis at https://anonfile[.]com/bbq8h9Bdn7/monero-wallet-cli.

H/T dark.fail

Source

Coin Stealer Found in Monero Linux Binaries From Official Site
Bleeping Computerhttps://www.bleepingcomputer.com
Breaking technology news, security guides, and tutorials that help you get the most from your computer. Smacking down ransomware one at a time.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest news

Top 7 Porn Sites That Accept Bitcoin/Crypto

Bitcoin and other cryptocurrencies are not that exotic anymore. Ever since the big boom on the crypto...

“Chinachain” aims to connect hundreds of cities across China. Will it work?

If there’s ever a “Chinachain” for business, sanctified and supported by the state, the BSN ( Blockchain...

Top 10 BEST Crypto Trading Books for New Traders (2020)

We may receive a small revenue share if you purchase something from this guide - with...

Crypto Firm That Connects Exchanges and Banks Receives $5m Investment From Wells Fargo

Cryptocurrency startup Elliptic recently held a Series B funding round which was joined by a venture arm...
- Advertisement -

Will New Zealand’s crypto salary project work?

Now in 2020, Bitcoin, and in a broader sense cryptocurrencies in general, have gone through hundreds of...

Is Tron’s decentralized app market really a “Las Vegas on the blockchain?”

The original idea behind creating cryptocurrencies was to offer a much more decentralized and convenient payment platform...

Must read

Top 7 Porn Sites That Accept Bitcoin/Crypto

Bitcoin and other cryptocurrencies are not that...

“Chinachain” aims to connect hundreds of cities across China. Will it work?

If there’s ever a “Chinachain” for business,...
- Advertisement -Coin Stealer Found in Monero Linux Binaries From Official SiteCoin Stealer Found in Monero Linux Binaries From Official Site

You might also likeRELATED
Recommended to you