Malware: Battle of the Crypto Miners by pundito

View this thread on steempeak.com
· @pundito · (edited)
$5.57
Malware: Battle of the Crypto Miners
### Cryptocurrency mining Trojans are the new trend in the malware scene. No wonder the developers are constantly improving their malware.

<center>![sunset-3192063_640.jpg](https://steemitimages.com/DQmXiLJ2hymkMDHytqD9nKZvLKAu5vgWNCftRwnHhAwD49X/sunset-3192063_640.jpg)
[pic source](https://pixabay.com)</center> 

The bandages in the battle for resources are getting tougher: The [ICS Sans](https://isc.sans.edu/forums/diary/The+Crypto+Miners+Fight+For+CPU+Cycles/23407/) has now discovered a crypto-miner that is looking for competitors in the first place and shuts them down in order to use the precious computing time for himself. In addition to the competing crypto-miners, the malware is able to recognize and terminate other processes that demand a lot of system performance, too.

The competitors switching off mining-trojan is targeting Windows users and disguised as an unsigned driver for HP printers in a 32- and 64-bit variant. It is currently unknown how the trojan is distributed and injected. Meanwhile, many virus scanners detect the Trojan and [sound the alarm](https://www.virustotal.com/#/file/3d8a6698ab0512ddf0c42826a570c2f82e3ec5e0f415538232353df937508042/detection).

<center>![virus-3075848_640.jpg](https://steemitimages.com/DQmPkZ7T6UyjHSjybquLRBXBn8iCP3Uc86JZ77juZTmjCJE/virus-3075848_640.jpg)
[pic source](https://pixabay.com)</center>

Those who fear an infection will find in ICS Sans' article a list of Windows processes that often appear in the context of active crypto-trojans in the Task Manager. If one of them turns up in it, you should end the process.

### Crypto-miner instead of ransomware

Since cryptocurrency rates such as Bitcoin explode, many malware authors have turned to crypto-miners. These have been making more headlines than blackmail Trojans for several months, which have brought unbelievable amounts of money to blackmailers in recent years.

The secret mining of crypto-currency does not just happen through Trojans on infected computers. Criminals also abuse web browsers or Google's DoubleClick advertising platform for these purposes.

At the end of last year, software manufacturers became aware of this and offer various protection concepts. In the web browser often helps an ad blocker, which can also block mining scripts.

I published [a post about crypto-jacking and the countermeasure](https://steemit.com/technology/@pundito/crytojacking-are-you-vulnerable) some weeks ago.

Have a nice weekend and keep on steeming!

[Story source](https://www.heise.de/security/meldung/Malware-Der-Kampf-der-Krypto-Miner-3996202.html)

<center><a href="https://smartsteem.com?r=pundito" target="_blank"><img src="https://steemitimages.com/0x0/https://steemitimages.com/DQmYRoKwatvUwCAfuZo4Gbvbr2qhtYLDZfbmBfNw76BnhiC/smartsteem_banner.gif" /></a></center>

<center>[<img src="https://steemitimages.com/DQmarWRv4wXiqPZbmtDCDRTwE5jewDQrG1ATrXcFrTThxht/Gifbanner.gif">](https://steemit.com/qurator/@qurator/qurator-2-0-update-post-guidelines-or-registration-details-or-tier-changes)</center>
👍  , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , and 8 others
properties (23)
post_id38,900,029
authorpundito
permlinkmalware-battle-of-the-crypto-miners
categorycryptocurrency
json_metadata"{"app": "steemit/0.1", "format": "markdown", "links": ["https://pixabay.com", "https://isc.sans.edu/forums/diary/The+Crypto+Miners+Fight+For+CPU+Cycles/23407/", "https://www.virustotal.com/#/file/3d8a6698ab0512ddf0c42826a570c2f82e3ec5e0f415538232353df937508042/detection", "https://steemit.com/technology/@pundito/crytojacking-are-you-vulnerable", "https://www.heise.de/security/meldung/Malware-Der-Kampf-der-Krypto-Miner-3996202.html", "https://smartsteem.com?r=pundito", "https://steemit.com/qurator/@qurator/qurator-2-0-update-post-guidelines-or-registration-details-or-tier-changes"], "image": ["https://steemitimages.com/DQmXiLJ2hymkMDHytqD9nKZvLKAu5vgWNCftRwnHhAwD49X/sunset-3192063_640.jpg"], "tags": ["cryptocurrency", "trojan", "virus", "windows", "hack"]}"
created2018-03-16 08:47:48
last_update2018-03-16 14:05:42
depth0
children3
net_rshares1,574,291,503,428
last_payout2018-03-23 08:47:48
cashout_time1969-12-31 23:59:59
total_payout_value4.240 SBD
curator_payout_value1.327 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length3,043
author_reputation28,473,735,368,834
root_title"Malware: Battle of the Crypto Miners"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
author_curate_reward""
vote details (72)
@minnowsupport ·
<p>Congratulations!  This post has been upvoted from the communal account, @minnowsupport, by pundito from the Minnow Support Project. It's a witness project run by aggroed, ausbitbank, teamsteem, theprophet0, someguy123, neoxian, followbtcnews, and netuoso. The goal is to help Steemit grow by supporting Minnows.  Please find us at the <a href="https://discord.gg/HYj4yvw"> Peace, Abundance, and Liberty Network (PALnet) Discord Channel</a>.  It's a completely public and open space to all members of the Steemit community who voluntarily choose to be there.</p> <p>If you would like to delegate to the Minnow Support Project you can do so by clicking on the following links: <a href="https://v2.steemconnect.com/sign/delegateVestingShares?delegator=&amp;delegatee=minnowsupport&amp;vesting_shares=102530.639667%20VESTS">50SP</a>, <a href="https://v2.steemconnect.com/sign/delegateVestingShares?delegator=&amp;delegatee=minnowsupport&amp;vesting_shares=205303.639667%20VESTS">100SP</a>, <a href="https://v2.steemconnect.com/sign/delegateVestingShares?delegator=&amp;delegatee=minnowsupport&amp;vesting_shares=514303.639667%20VESTS">250SP</a>, <a href="https://v2.steemconnect.com/sign/delegateVestingShares?delegator=&amp;delegatee=minnowsupport&amp;vesting_shares=1025303.639667%20VESTS">500SP</a>, <a href="https://v2.steemconnect.com/sign/delegateVestingShares?delegator=&amp;delegatee=minnowsupport&amp;vesting_shares=2053030.639667%20VESTS">1000SP</a>, <a href="https://v2.steemconnect.com/sign/delegateVestingShares?delegator=&amp;delegatee=minnowsupport&amp;vesting_shares=10253030.639667%20VESTS">5000SP</a>. <br><strong>Be sure to leave at least 50SP undelegated on your account.</strong></p>
properties (22)
post_id39,142,606
authorminnowsupport
permlinkre-malware-battle-of-the-crypto-miners-20180317t215735
categorycryptocurrency
json_metadata{}
created2018-03-17 21:57:36
last_update2018-03-17 21:57:36
depth1
children0
net_rshares0
last_payout2018-03-24 21:57:36
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length1,703
author_reputation104,981,098,086,561
root_title"Malware: Battle of the Crypto Miners"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
@liberviarum ·
Nice article. Thank you for bringing this news. Malwares vs malwares. Lol. 

However since it's targeting Windows, any Linux / Mac systems are safe I assume?
👍  
properties (23)
post_id39,458,949
authorliberviarum
permlinkre-pundito-malware-battle-of-the-crypto-miners-20180319t173040358z
categorycryptocurrency
json_metadata"{"app": "steemit/0.1", "tags": ["cryptocurrency"]}"
created2018-03-19 17:30:42
last_update2018-03-19 17:30:42
depth1
children1
net_rshares2,912,077,273
last_payout2018-03-26 17:30:42
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length157
author_reputation724,435,960,074
root_title"Malware: Battle of the Crypto Miners"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000
author_curate_reward""
vote details (1)
@pundito ·
Hi @liberviarum,
they are indeed targeting Windows. I could not find any news about this regarding Linux / Mac systems. So I assume they are still save.
Happy steeming!
properties (22)
post_id39,472,736
authorpundito
permlinkre-liberviarum-re-pundito-malware-battle-of-the-crypto-miners-20180319t191418131z
categorycryptocurrency
json_metadata"{"app": "steemit/0.1", "users": ["liberviarum"], "tags": ["cryptocurrency"]}"
created2018-03-19 19:14:15
last_update2018-03-19 19:14:15
depth2
children0
net_rshares0
last_payout2018-03-26 19:14:15
cashout_time1969-12-31 23:59:59
total_payout_value0.000 SBD
curator_payout_value0.000 SBD
pending_payout_value0.000 SBD
promoted0.000 SBD
body_length168
author_reputation28,473,735,368,834
root_title"Malware: Battle of the Crypto Miners"
beneficiaries[]
max_accepted_payout1,000,000.000 SBD
percent_steem_dollars10,000