Stories
Slash Boxes
Comments

SoylentNews is people

Submission Preview

Link to Story

New Botnet Infects Cryptocurrency Mining Computers, Replaces Wallet Address

Accepted submission by Fnord666 at 2018-01-18 03:10:00
Security

Satori—the malware family that wrangles routers, security cameras, and other Internet-connected devices into potent botnets—is crashing the cryptocurrency party with a new variant that surreptitiously infects computers dedicated to the mining of digital coins.

A version of Satori that appeared on January 8 exploits one or more weaknesses in the Claymore Miner [github.com], researchers from China-based Netlab 360 said in a report published Wednesday [360.com]. After gaining control of the coin-mining software, the malware replaces the wallet address the computer owner uses to collect newly minted currency with an address controlled by the attacker. From then on, the attacker receives all coins generated, and owners are none the wiser unless they take time to manually inspect their software configuration.

Records show [dwarfpool.com] that the attacker-controlled wallet has already cashed out slightly more than 1 Etherium coin. The coin was valued at as much as $1,300 when the transaction was made. At the time this post was being prepared, the records also showed that the attacker had a current balance of slightly more than 1 Etherium coin and was actively mining more, with a calculation power of about 2,100 million hashes per second.

Story at ArsTechnica [arstechnica.com]


Original Submission