SoylentNews

Hacker Exploits Synology NAS Box Vulnerabity, Mines $620k in Dogecoin

posted by n1 on Friday June 20 2014, @06:51PM   
from the nas-based-beowulf-mining-cluster dept.

Horse With Stripes writes:

ThreatPost is reporting that a hacker, well-versed in malware and exploit development, took advantage of vulnerabilities in Synology network attached storage boxes popular with home users to mine more than $600,000 worth of the digital currency Dogecoin.

Researchers Pat Litke and David Shear of Dell SecureWorks' Counter Threat Unit published details of the attack, which exploited four vulnerabilities in the Synology boxes' DiskStation Manager Linux-based operating system. The bugs were reported last September and patched in February.

"To date, this incident is the single most profitable, illegitimate mining operation. This conclusion is based in part on prior investigations and research done by the Counter Threat Unit, as well as further searching of the Internet," they said. "As cryptocurrencies continue to gain momentum, their popularity as a target for various malware will continue to rise."

• Re:Amusing timing Re:Amusing timing (Score: 2) by Horse With Stripes on Friday June 20 2014, @07:43PM

  by Horse With Stripes (577) on Friday June 20 2014, @07:43PM (#58126)

  Should we coin a new term? BlackOpHat? BlkOpHat?

  I think this was clearly a case of a Hackertunist.

  Parent

  Starting Score:	1		point
  Moderation		+1
  Underrated=1, Total=1
  Total Score:		2

• Re:Amusing timing (Score: 0) by Anonymous Coward on Friday June 20 2014, @07:56PM

  by Anonymous Coward on Friday June 20 2014, @07:56PM (#58132)

  I think this was clearly a case of a Hackertunist.

  Which are quite rare compared to the opportoonists.

  Parent