Remove 2017 Remove Cryptocurrency Remove DDOS
article thumbnail

Fileless PowerGhost cryptocurrency miner leverages EternalBlue exploit to spread

Security Affairs

Security experts from Kaspersky Lab have spotted a new cryptocurrency miner dubbed PowerGhost that can spread leveraging a fileless infection technique. “ PowerGhost also tries to spread across the local network using the now-notorious EternalBlue exploit ( CVE-2017-0144 ).” ” continues the analysis. .

article thumbnail

Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

Security Affairs

Group-IB has estimated that crypto exchanges suffered a total loss of $882 million due to targeted attacks between 2017 and 2018. In most cases, cybercriminals, while attacking cryptocurrency exchanges, use traditional tools and methods, such as spear phishing, social engineering, distribution of malware, and website defacement.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

DirtyMoe botnet infected 100,000+ Windows systems in H1 2021

Security Affairs

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Experts defined DirtyMoe as a complex malware that has been designed as a modular system.

DNS 145
article thumbnail

The author of the Mirai botnet gets six months of house arrest

Security Affairs

million in compensation for DDoS attacks against the systems of Rutgers University. million in compensation for DDoS attacks against the systems of Rutgers University. million in compensation for DDoS attacks against the systems of Rutgers University. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

DDOS 111
article thumbnail

‘Spam Nation’ Villain Vrublevsky Charged With Fraud

Krebs on Security

years in a Russian penal colony for convincing one of his top affiliates to launch a distributed denial-of-service (DDoS) attack against a competitor that shut down the ticketing system for the state-owned Aeroflot airline. In February 2017, Horohorin was released after serving four years in a U.S.

Banking 247
article thumbnail

PurpleFox malware infected at least 2,000 computers in Ukraine

Security Affairs

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Experts defined DirtyMoe as a complex malware that has been designed as a modular system.

Malware 138
article thumbnail

Necro Python bot now enhanced with new VMWare, server exploits

Security Affairs

Talos experts noticed that a version released on May 18 included Python versions of EternalBlue ( CVE-2017-0144 ) and EternalRomance ( CVE-2017-0147 ) exploits with a Windows download command line as the payload. The bot used a user-mode rootkit to hide the malicious process and malicious registry entries created.

Malware 130