Posts

Showing posts with the label Cryptocurrency

Plurox Virus – A new name in the long list of Malwares

Image
Understanding the Malicious Plurox Virus According to researches, it was initially discovered in February, 2019. It is believed that this destructive virus is still in its testing phase. Plurox Virus – the malicious malware operates as a cryptocurrency miner. It proliferate itself on computers connected to local network, with the motive of mining crypto currencies. As a rule, Plurox Trojan makes a backdoor entry in your system without your knowledge. In other words, the nasty Plurox is Trojan , Self – Spreading Virus and a Cryptocurrency-Miner all at the same time. By Cryptocurrency miner, we refer to programs that solve mathematical problems using computer’s CPU and GPU. Typically, it is used to mine cryptocurrency! In addition, it consumes high electricity which results in higher electricity bills. The destruction of cryptocurrency miners are not yet over! It also overheats the system and cause unexpected shut downs. In order to restrict the financial or data loss, we ...

Malvertising Scheme targets baleful ads on Yandex.Direct

Image
Yandex.Direct Compromised with Malvertising Attack   Cyber Crooks have recently been reported to exploit Yandex.Direct, a Russian Online Marketing Service via a malign advertising campaign. This  Malvertising scheme  is supplying malevolent ads & targeting a large number of Russian accountants with the sole motive of transmitting Ransomware &  Banking Trojans  to them. This colossal  Malvertising Attack  is propagating a plethora of malware that has specifically been designed to encipher user’s data & whip  Cryptocurrency . Cyber Security analysts from ESET, an IT Security Company headquartered in Slovakia, have found around 6 malware agendas associated with this ongoing  Malvertising scheme.  From the past few months the hacking group is targeting Russian organizations & using two renowned backdoors namely- Buhtrap & RTM along with Cryptocurrency Stealers &  Ransomware . The  Malvert...

Fake Android Antivirus 2019 On Play Store Since 2015

Image
Most Of Android Antivirus Applications Are Rated As Worthless Modern gravity investigation against Anti-virus Android 2019 software in Play Store & by Malware Analyst,  Lukas Stefanko  at ESET exposed the Baboon Antivirus and Android developer that has been active since 2015. These influential Apps stay listed in the section of  Antivirus   for Android- Certain apps last more popular below their divisions with more than 500 thousand installs. Classification & Specialties Pretended Antivirus for Android Mobile Security claims: Shields Android mobile phone or tablet toward  viruses , malware, and spyware they also constitute a limitation from coexisting standards of peril from Viruses &  Trojans . 1. Protection module & characteristics: Security & Antivirus Speed booster Installing & Uninstalling apps Play store & Browser Settings Hide private chats (App Lock) Set System proneness & scan apps, file systems ...

Online JavaScript Library’s Popularity utilized in stealing Cryptocurrency

Image
A widely used Node.js code library listed in NPM’s warehouse of repository has been infected to include crypto-coin-stealing malware. npm is the most widely used package manager for Javascript programming language. It is the default package manager for an open source, cross platform JavaScript run-time environment Node.js. The library in question, Event-Stream, is a popular Javascript library that scores over two million downloads every week by application programmers. The projects that use event-stream in some way should undergo a thorough check to ensure that you didn’t install and fetch the dodgy version during testing or deployment. This vandalism is a stark reminder of dangers associated with reliable and complex webs of dependencies in software. Without proper precautions taken throughout the whole chain, an app’s security can be broken by modifying any component. The Event-Stream npm package was originally created & maintained by Dominic Tarr, a New-Zeland base...

Lukas Stefanko – The Man on a Mission!

Image
The world of Cyber security is familiar with the name, Lukas Stefanko, the renowned cyber researcher responsible to enlighten general mass with his critical researches. Lukas Stefanko works at ESET- a famous brand in IT security universe. With his 7 years of services for the organization, Lukas has proven his worth many times with his curiosity to expose threat programs & false apps. Regarded as one of the front end contributors in IT security, Lukas started his career as Malware Analyst for Windows Platform. Stefanko was able to sense the growing popularity of android at an early stage and knew the future of cyber security shift towards it. The challenges and lack of then expertise to deal with such issues excited him and motivated to take the challenging role of Android Malware Analyst. With his stipulations proven true, and as the world shifted the focus to in hand technology, the cyber criminals began targeting android. The added advantage of being...

Free ethereum Spinner – A Honey Trap

Image
All work and No Play makes Jack a dull boy’. Since childhood we have been taught to maintain a balance between the work and recreation to revitalize the mind’s abilities. Online gaming is gaining immense popularity especially among young generation as it is a source of entertainment and refreshment after a hectic schedule. Earning money by playing games online at the same time would be the icing on the cake. Most of us may be acquainted with the fact that earning money by playing games online is now possible. However earning a quick buck without spending a penny is like dream come true.  With Free Ethereum Spinner and similar cryptocurrency game apps available on Google Play Store, you can mint money while enjoying playing. All you need is an android phone and access to Internet. Excited ? Don’t Be! Read more! Free Ethereum Spinner is an android application available on Google Play Store from February 2018. The app has been well received by the public with more than 1...

Google Play vulnerable to Fake finance apps target users around the world

Image
Google Play Store is a premier global marketplace to distribute innovative apps and games. Its stringent developer policies make this online platform world’s most trusted source for apps and games.  Google Play Store’s Developer Policies include: * Prohibiting apps with Sexually Explicit or Inappropriate Content that promote hatred, violence, terrorism, bullying and harassment. * Discouraging apps that expose users to deceptive or harmful financial instruments. * Forbid apps that promote illegal activities like illicit sale of drugs, liquor, or tobacco etc * Taboo copied or impersonated apps that aim to deceive users. * Interdict apps that infringe on the intellectual property rights of others. The list of these policies is non-exhaustive. Google Play Store has earned a huge fan following because of these policies. Billions of Android and Windows users rely on Google Play Store to download any app or games. However we should also understand that with evolving technologi...

Jaxx wallet phishing campaign: Cryptocurrency Miners Swindled of Blockchain Assets

Image
Jaxx wallet phishing campaign aimed to drain user wallets Cryptocurrency miners! Are you in a state of dilemma of where to store the cryptocurrency you own? Are you wondering if the Jaxx wallet is a correct place to store the cryptocurrency you have bought? The official Jaxx cryptocurrency wallet has enmeshed in a phishing campaign designed to drain user wallets. Before we go in depth of Jaxx wallet Phishing campaign, let us get enlightened with  Cryptocurrency Wallets. Cryprocurrency wallets are necessary for trading  Bitcoin , or any other digital currency. Before you consider trading in cryptocurrency, you first need to know what cryptocurrency is and how it works. A crypto currency wallet comprises of two elements-  a private key and a public address. Private Key:  In order to access your cryptocurrency wallet, a cryptocurrency holder should own a private key.  This key if fallen in wrong hands can lead to the embezzlement of your cryptocurrenc...

MikroTik Routers vulnerable to cryptocurrency mining campaigns

Image
Over 3,700 Unpatched MikroTik Routers Abused In CryptoJacking Campaigns The vulnerability  CVE-2018-14847  in  MikroTik RouterOS has become eye-candy for cyber maniacs. The ease of exploitation of this vulnerability has resulted in massive abuse of these routers and their network resources in cryptomining. The threat actors exploit the known vulnerability in MikroTik Routers by executing a malicious script to gain administrator privilege on the router. Mikrotik was founded in Latvia in 1995. The brand particularly focuses on designing wireless devices and routers. With the help of a congruent and hidden script, cyber hackers were able to misuse the network resources and bandwidth of MikroTik Router in mining CoinHive Cryptocurrency. CoinHive is a JavaScript cryptocurrency miner for the Monero Block-chain. CoinHive in-browser cryptocurrency mining script thst can be embedded in a browser easily. That is why this cryptocurrency mining script is popular among thre...

Cryptojacking Campaign Alert! GitHub Account and Unofficial GitHub CDN Removed

Image
GitHub Attacked Cyber miscreants have inclined to GitHub and GitHub-related services to stealthily distribute cryptocurrency mining malware without user consent. Git is a tool, a revision control system to manage source code history. Git stores this information in a data structure called repository. GitHub is a static site hosting service of Git repository that aims to manage project or set of files, personal and organization pages. Cryptocurrency mining malware are developed to take over computers’ resources and harness the system’s processing power to generate revenue. According to the researches by renowned cyber security companies, a single cryptocurrency mining botnet (collection of internet- connected devices like PCs, mobiles, servers etc infected with the common type of malware without user knowledge) can earn up to $30,000 per month to its developers. Many cryptojacking campaigns have been identified in the past months that left GitHub attacked . For instance, forkin...

Crypt-o-currency Mining Apps banned by Google from the Play Store

Image
Google has recently updated the Play Store Developer Policy page to prohibit several categories of apps including the ones that mine cryptocurrency on user’s device. Google states that “We don’t allow apps that mine cryptocurrency on devices”. According to newly added policy Google will however continue to “permit apps that remotely manage the mining of cryptocurrency”.  This implies that the crypt-o-currency mining operations that utilize device’s CPU (Central Processing Unit) or GPU (Graphical Processing Unit) will be removed from the official play store. Hence, only those mining apps will be permitted on Google’s official Play Store that control the mining operations on remote devices – such as cloud based mining servers or desktop . Google bans Cryptocurrency mining apps – Reasons behind this act

$13.5 million worth of digital token stolen in Bancor, a Cryptocurrency start-up

Image
Bancor, an- Israel based company that runs a ‘decentralized’ crypt-o-currency mining & exchange network that allows users to convert between two tokens like an exchange without involving any counterparty. The network allows all kinds of virtual coins to be bought and sold instantly. A standard crypt-o-currency exchange involves exchange of tokens between two parties. A Bancor protocol in contrast works on an alternative trading mechanism that uses smart contracts to create smart tokens. Smart Contract: A smart contract is a computer program that digitally facilitates, verifies, or enforces the negotiation or performance of a contract without involving third parties. These transactions can be tracked and are irreversible. Smart Token: A smart token can be considered as a coin that holds the monetary value of other compatible virtual coins.For instance, it works on the same principle as of a central bank that holds foreign currency reserves and converts between them as requir...