Tag: cryptocurrency

  • VB2019 video: Discretion in APT: recent APT attack on crypto exchange employees

    In June, employees at cryptocurrency exchange Coinbase were targeted by emails linking to a website that used two zero-day vulnerabilities in the Firefox browser to deliver macOS malware. The malware, dubbed ‘NetWire’, had previously been known but the exploit allowed it to bypass built-in protections against it. The NetWire sample was analysed by regular VB…

  • VB2018 preview: Cyber Threat Alliance

    Last week, the Cyber Threat Alliance (CTA) published a report on the illicit mining of cryptocurrencies. The report is notable for two reasons: first because it is exceptionally good in its analysis of the problem, and secondly (and perhaps not unrelated) because researchers from no fewer than eight security companies contributed to the report. Though the…

  • VB2018 preview: Cyber Threat Alliance

    Last week, the Cyber Threat Alliance (CTA) published a report on the illicit mining of cryptocurrencies. The report is notable for two reasons: first because it is exceptionally good in its analysis of the problem, and secondly (and perhaps not unrelated) because researchers from no fewer than eight security companies contributed to the report. Though the…

  • VB2018 preview: Explain Ethereum smart contract hacking like I am five

    Shout ‘blockchain’ in a group of security experts and everyone will start to laugh. It is fair to say that the security community tends to be rather sceptical about cryptocurrencies and blockchains and the promises that come with them. But it is easy to forget that many well-meaning people invest real money in these technologies.…

  • VB2018 preview: Explain Ethereum smart contract hacking like I am five

    Shout ‘blockchain’ in a group of security experts and everyone will start to laugh. It is fair to say that the security community tends to be rather sceptical about cryptocurrencies and blockchains and the promises that come with them. But it is easy to forget that many well-meaning people invest real money in these technologies.…

  • VB2018 preview: From drive-by download to drive-by mining

    “Understanding the new paradigm”, Malwarebytes researcher Jérôme Segura writes in the title of his upcoming VB2018 presentation on drive-by mining. He could hardly have put it more accurately – the rise of malicious cryptocurrency miners is the main security trend of the past 12 months. In the paper , Jérôme will look at those miners that…

  • VB2018 preview: From drive-by download to drive-by mining

    “Understanding the new paradigm”, Malwarebytes researcher Jérôme Segura writes in the title of his upcoming VB2018 presentation on drive-by mining. He could hardly have put it more accurately – the rise of malicious cryptocurrency miners is the main security trend of the past 12 months. In the paper , Jérôme will look at those miners that…

  • Necurs update reminds us that the botnet cannot be ignored

    If, at some point in the past few years, you have looked at a spam campaign in which a lot of emails were being sent from Vietnam or India, there’s a good chance the spam was sent by the Necurs botnet. Necurs has been active for at least six years – Virus Bulletin published a…

  • Necurs update reminds us that the botnet cannot be ignored

    If, at some point in the past few years, you have looked at a spam campaign in which a lot of emails were being sent from Vietnam or India, there’s a good chance the spam was sent by the Necurs botnet. Necurs has been active for at least six years – Virus Bulletin published a…

  • XMRig used in new macOS cryptominer

    Users complaining on Apple ‘s official discussion forum about processes that use a lot of CPU have led to the discovery of a new piece of cryptocurrency-mining malware on macOS that is based on XMRig, Malwarebytes researcher Thomas Reed writes . The open-source XMRig Monero miner is widely used for both benign and malicious purposes.…