Remove 2016 Remove Cryptocurrency Remove DNS
article thumbnail

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms

Security Affairs

Palo Alto Network researchers discovered a new malware, tracked as XBash, that combines features from ransomware, cryptocurrency miners, botnets, and worms. The malicious code combines features from different families of malware such as ransomware, cryptocurrency miners, botnets, and worms. This is shown below in Figure 6.

article thumbnail

The BlueNoroff cryptocurrency hunt is still on

SecureList

BlueNoroff is the name of an APT group coined by Kaspersky researchers while investigating the notorious attack on Bangladesh’s Central Bank back in 2016. Also, we have previously reported on cryptocurrency-focused BlueNoroff attacks. A mysterious group with links to Lazarus and an unusual financial motivation for an APT.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex

Krebs on Security

The government also indicted and sanctioned a top Russian cybercriminal known as Taleon , whose cryptocurrency exchange Cryptex has evolved into one of Russia’s most active money laundering networks. A 2016 screen shot of the Joker’s Stash homepage. The links have been redacted. A screenshot of a website reviewing PM2BTC.

article thumbnail

Chinese-speaking cybercrime gang Rocke changes tactics

Security Affairs

. “the actor moved away from hosting the scripts on dedicated servers and instead started to use Domain Name System (DNS) text records. These records are accessed via normal DNS queries or DNS-over-HTTPs ( DoH ) if the DNS query fails. “Rocke keeps evolving its TTPs in attempts to remain undetected.

article thumbnail

Microsoft releases open-source tool for checking MikroTik Routers compromise

Security Affairs

The news wave of attacks aimed at cryptocurrency firms, most of them located in the U.S. TrickBot is a popular Windows banking Trojan that has been around since October 2016, its authors have continuously upgraded it by implementing new features, including powerful password-stealing capabilities. Pierluigi Paganini.

Malware 132
article thumbnail

The State of Blockchain Applications in Cybersecurity

eSecurity Planet

Since blockchain’s arrival, cryptocurrency has framed the technology as permissionless, or a public blockchain. The razzmatazz of cryptocurrency hasn’t helped blockchain’s adoption as a technology beyond finance. More robust security for Domain Name Systems (DNS). The Intersection of Cryptocurrency and Cybersecurity.

article thumbnail

TA505 Group adds new ServHelper Backdoor and FlawedGrace RAT to its arsenal

Security Affairs

The threat actors use the.bit Top-Level Domain (TLD) for the Domain Name System (DNS) servers. bit” C&C domains was added to protect the C2 infrastructure, this TLD is associated with the cryptocurrency Namecoin and requires special DNS servers that the malware uses (dedsolutions[.]bit, The support for “.bit” bit, arepos[.]bit).null.

Malware 111