Antivirus Cryptocurrency DNS Hacking 
Security Affairs
APRIL 24, 2024
A malware campaign has been exploiting the updating mechanism of the eScan antivirus to distribute backdoors and cryptocurrency miners. Avast researchers discovered and analyzed a malware campaign that exploited the update mechanism of the eScan antivirus to distribute backdoors and crypto miners.
Krebs on Security
MARCH 28, 2021
26, Shadowserver saw an attempt to install a new type of backdoor in compromised Exchange Servers, and with each hacked host it installed the backdoor in the same place: “ /owa/auth/babydraco.aspx. Oddly, none of the several dozen antivirus tools available to scan the file at Virustotal.com currently detect it as malicious.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
JUNE 27, 2021
Researchers have discovered a strain of cryptocurrency-mining malware, tracked as Crackonosh, that abuses Windows Safe mode to avoid detection. . Researchers from Avast have spotted a strain of cryptocurrency miner, tracked as Crackonosh, that abuses Windows Safe mode to avoid detection. SecurityAffairs – hacking, Crackonosh).
Security Affairs
JUNE 22, 2021
The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Experts pointed out that the number of infected systems could be far greater because data provided by AVAST are only related to systems running their antivirus solution. Pierluigi Paganini.
Security Affairs
DECEMBER 19, 2022
The botnet was involved in stealing users’ credentials and data, mining cryptocurrencies abusing victims’ resources, and setting up proxies to funnel other people’s internet traffic through infected machines and routers. SecurityAffairs – hacking, Glupteba botnet). Pierluigi Paganini.
Security Affairs
MAY 8, 2022
SecurityAffairs – hacking, newsletter). If you want to also receive for free the newsletter with the international press subscribe here. To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.
Security Affairs
OCTOBER 15, 2019
The malicious code is used by the hackers to deliver a Moner (XMR) crypto miner that is not detected by almost any antivirus solution. “the actor moved away from hosting the scripts on dedicated servers and instead started to use Domain Name System (DNS) text records. .
Expert insights. Personalized for you.
99 
Let's personalize your content