Posts

Showing posts with the label Cryptojacking Campaign

MikroTik Routers vulnerable to cryptocurrency mining campaigns

Image
Over 3,700 Unpatched MikroTik Routers Abused In CryptoJacking Campaigns The vulnerability  CVE-2018-14847  in  MikroTik RouterOS has become eye-candy for cyber maniacs. The ease of exploitation of this vulnerability has resulted in massive abuse of these routers and their network resources in cryptomining. The threat actors exploit the known vulnerability in MikroTik Routers by executing a malicious script to gain administrator privilege on the router. Mikrotik was founded in Latvia in 1995. The brand particularly focuses on designing wireless devices and routers. With the help of a congruent and hidden script, cyber hackers were able to misuse the network resources and bandwidth of MikroTik Router in mining CoinHive Cryptocurrency. CoinHive is a JavaScript cryptocurrency miner for the Monero Block-chain. CoinHive in-browser cryptocurrency mining script thst can be embedded in a browser easily. That is why this cryptocurrency mining script is popular among thre...

Cryptojacking Campaign Alert! GitHub Account and Unofficial GitHub CDN Removed

Image
GitHub Attacked Cyber miscreants have inclined to GitHub and GitHub-related services to stealthily distribute cryptocurrency mining malware without user consent. Git is a tool, a revision control system to manage source code history. Git stores this information in a data structure called repository. GitHub is a static site hosting service of Git repository that aims to manage project or set of files, personal and organization pages. Cryptocurrency mining malware are developed to take over computers’ resources and harness the system’s processing power to generate revenue. According to the researches by renowned cyber security companies, a single cryptocurrency mining botnet (collection of internet- connected devices like PCs, mobiles, servers etc infected with the common type of malware without user knowledge) can earn up to $30,000 per month to its developers. Many cryptojacking campaigns have been identified in the past months that left GitHub attacked . For instance, forkin...