AT&T's Alien Labs is dipping its toes into cryptomining malware analysis with a new technological breakdown of how a monero miner infiltrates networks.
Released Thursday, the report by security researcher Fernando Domínguez provides a step-by-step walkthrough of how one rather low-profile cryptojacker infects and spreads across vulnerable Exim, Confluence and WebLogic servers, installing malicious code that mines monero through a proxy.
Exim servers represent more than half of all email servers, according to ZDNet.
The worm first injects target servers with a BASH script that checks for, and kills, competing mining processes before attempting to infiltrate other known machines in the network.
Crypto-miners often kill off competing miners when they infect a system, and for one very simple reason: The more CPU a different process hogs, the less is left over for others, according to the report.
Breached servers then download the script's payload: an "Omelette" based on the open-source monero miner called XMRig.
It has been retrofitted into MacBook miners, spread across 500,000 computers and, in 2017, became so popular that malicious mining reports spiked over 400 percent.
This modified miner does its business via proxy, according to AT&T Alien Labs.
It had previously been studied by cloud security analysis firm Lacework in July.Researchers don't quite know how widespread this unnamed monero miner is.
Alien Labs' report admits that "It is hard to estimate how much income this campaign has reported to the threat actor," but notes the campaign is "Not very big."
AT&T's Cybersecurity Branch Breaks Down Crypto Miner Threat to Email Servers
Published on Jan 9, 2020
by Coindesk | Published on Coinage
Mentioned in this article
Another mainstream company is seeking approval to invest in crypto
Anthony Scaramucci's investment firm, SkyBridge, seeks approval from the SEC to invest in crypto.
COVID-19 popularized decentralization, but blockchain may not catch on
On Nov. 9, drugmaker Pfizer announced that its COVID-19 vaccine is 90-plus percent effective, and even though it may be premature to proclaim the pandemic's end - as the virus continues to rage in the United States and Europe - once can at least speculate: Where will blockchain adoption stand when the crisis abates?
Bitcoin hits new 2020 high at $16.7K -Traders expect bigger breakout
The price of Bitcoin hit a new yearly high at $16,717 on Binance.
The next big crypto market could be fantasy sports, says Messari
As "Digitally native" ecosystems like esports continue to synergize with blockchain technology, industries like fantasy sports could be primed for mass adoption, says digital research firm Messari.