News This Malware Has a Worrying Trick to Mine Monero...

This Malware Has a Worrying Trick to Mine Monero on Cloud Servers

-

- Advertisment -

A recently observed form of malware uses a concerning new trick to avoid detection and mine cryptocurrency on cloud servers.

Two researchers, Xingyu Jin and Claud Xiao, from cybersecurity firm Palo Alto Networks, published a report on Thursday, saying that a nasty bit of software from bad actors dubbed the Rocke group is targeting public cloud infrastructure. Once downloaded, it takes administrative control to first uninstall cloud security products and then inject code that mines the monero cryptocurrency.

The researchers found that the Rocke malware injected code to uninstall five different cloud security products from infected Linux servers – including offerings from top Chinese cloud providers, Alibaba and Tencent. Adding insult to injury, the malware follows the uninstall steps set out in the products’ user manuals.

To do its malicious work, the Rocke group exploits vulnerabilities in Apache Struts 2, Oracle WebLogic, and Adobe ColdFusion applications, and then downloads a shell script named “a7.” This knocks our rival crypto miners and conceals signs of its presence, as well as disabling the security programs.

The researchers add:

“To the best of our knowledge, this is the first malware family that developed the unique capability to target and remove cloud security products.”

The Rocke group malware was first discovered by IT giant Cisco’s Talos Intelligence Group back in August. At the time Talos researcher David Liebenberg said that Rocke will “continue to leverage Git repositories to download and execute illicit mining onto victim machines.”

Back in November, research from Israel-based cybersecurity firm Check Point Software Technologies showed that a monero mining malware, dubbed KingMiner, is evolving through time to avoid detection.

Monero remains by far the most popular cryptocurrency among hackers. Last week, a study by college researchers showed that hackers have mined at least 4.32 percent of the total monero in circulation.

A study from McAfee, published in December, showed that instances of crypto-mining malware grew by over 4,000 percent last year.

Malware image via Shutterstock 

Source link

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest news

Bitcoin SV has found a new niche in the gaming industry

Gaming companies and online casinos are increasingly paying attention to cryptocurrencies as a possible payment tool. Several...

Why could GLBrain become a great solution to receive support during the crisis?

To support smaller and medium-sized businesses during the ongoing crisis, GLBrain offers services cost-free for all Austrians....

Make Fast and Secure Trades Using Bitengo.io

Bitengo.io is a Cryptocurrency trading platform that allows users to buy and sell their Cryptocurrency in a...

Network Security Using Cryptography: Everything you need to know

This article will describe what is Network Security Using Cryptography and everything you need to know before...
- Advertisement -This Malware Has a Worrying Trick to Mine Monero on Cloud Servers

Mercuriex Cryptocurrency Exchange Launches New Utility Token, SURF

MercuriEx Cryptocurrency Exchange, originally developed in 2017, came under new ownership in December 2019. Since taking over the exchange,...

Fungibility: Bitcoin Mixers Favorite Term That No One Understands

Fungibility, perhaps the most important concept when dealing with a decentralized and anonymous currency, but does bitcoin...

Must read

Bitcoin SV has found a new niche in the gaming industry

Gaming companies and online casinos are increasingly...
- Advertisement -

You might also likeRELATED
Recommended to you