Launched on Nov. 24, a new cryptojacking campaign uses Docker platforms that have API endpoints exposed online to mine XMR. A group of hackers has launched a new cryptojacking campaign on Nov. 24, scanning as many as 59,000 IP networks to find Docker platforms that have API endpoints exposed online, business technology publication ZDNet reports…
Read more
Major antivirus software supplier Eset has found cyber criminals using YouTube to distribute mining modules to cryptojack Monero. Slovakian software security firm Eset has uncovered that cyber criminals behind the Stantinko botnet have been distributing a Monero (XMR) cryptocurrency mining module via Youtube. On Nov. 26, the major antivirus software supplier Eset reported that the…
Read more
Microsoft security analysts reveal that cryptocurrency-stealing malware “Dexphot” already infected 80,000 computers earlier this year. The Microsoft Defender ATP research team shares insights on a new cryptocurrency-stealing malware variant that has infected close to 80,000 computers. On Nov. 26, Microsoft security analysts revealed that the malware, called Dexphot, had already infected close to 80,000 devices…
Read more
Members of the Zcash community discover a suspicious and potentially malicious counterfeit version of Zcash Foundation’s native ZecWallet. Members of the Zcash (ZEC) community have discovered a suspicious and potentially malicious counterfeit version of Zcash Foundation’s native ZecWallet. According to a Twitter post published on Oct. 20 and retweeted by Zcash developer Electric Coin Company,…
Read more
The notorious North Korean hackers known as the Lazarus APT Group have created another malware targeting Apple Macs and cryptocurrency users. The notorious North Korean hackers known as the Lazarus APT Group have created another malware targeting Apple Macs that masquerades behind a fake cryptocurrency firm. Apple Mac security specialist and principal security researcher at…
Read more
The MasterMana botnet is proving that even budget hackers can achieve considerable success via phishing email scams. Around 72,000 devices in 2019 alone were infected during a suspiciously cheap yet successful malware campaign to steal cryptocurrency, new data warns. MasterMana continues to spread According to the research report published by cyberintelligence company Prevailion on Oct.…
Read more
Major Slovakia-based antivirus software provider ESET has discovered a Latin American banking trojan that can steal crypto.
Major Slovakia-based antivirus software provider ESET has discovered a banking trojan that can steal cryptocurrencies and is especially widespread in Latin America.
Known as “Casbaneiro” or “Metamorfo,” the newly found malware family targets banks and cryptocurrency services located in Brazil and Mexico, ESET’s editorial arm WeLiveSecurity reports Oct. 3.
According to the report, Casbaneiro uses a social engineering execution method, which displays fake pop-up windows misleading potential victims to enter sensitive information. The capabilities of the malware are typical of Latin American banking trojans that can take screenshots and send them to command and control server, simulate keyboard actions and capture keystrokes as well as restrict access to websites and download and execute other tools, the report notes.
Alongside banks, one of the major targets of Casbaneiro is cryptocurrency wallets. According to ESET, Casbaneiro is capable of monitoring the content of the clipboard and replacing the crypto wallets victims have copied with addresses belonging to the attacker.
As noted in the report, ESET has become aware of only one attacker’s wallet at the time of publication. Reportedly hardcoded in the binary code, the reported wallet has around 1.2 Bitcoin (BTC), worth $9,812 at press time with a total number of transactions amounting to 71, according to Blockchain.com.
Additionally, the newly discovered malware uses multiple cryptographic algorithms, with each one intending to protect a different type of data, the report says.
On Sept. 26, Amerian Internet infrastructure firm Juniper Networks warned users of a new spyware called Masad Clipper and Stealer, which reportedly uses the Telegram app to replace crypto addresses with its own.
