article thumbnail

Prometei botnet evolves and infected +10,000 systems since November 2022

Security Affairs

A new version of the Prometei botnet has infected more than 10,000 systems worldwide since November 2022, experts warn. Cisco Talos researchers reported that the Prometei botnet has infected more than 10,000 systems worldwide since November 2022. ” reads the post published by Cisco Talos. Russia only accounted for 0.31

Mining 98
article thumbnail

StripedFly, a complex malware that infected one million devices without being noticed

Security Affairs

In 2022, the researchers detected within the WININIT.EXE process an older code that was associated with the NSA-linked Equation malware. Further analysis revealed that the malware has been used since at least 2017. Kaspersky discovered that the detections between 2017 and 2022 had previously misclassified as a cryptocurrency miner.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Russia-linked APT28 and crooks are still using the Moobot botnet

Security Affairs

The analysis of memory dumps and command-and-control connections revealed that the botnet is running a variant of the Ngioweb malware. ” reported Trend Micro. “Apart from the EdgeRouter devices, we also found compromised Raspberry Pi and other internet-facing devices in the botnet. ” concludes the report.

article thumbnail

Cryptomining campaign targets Linux systems with Go-based CHAOS Malware

Security Affairs

Researchers spotted a cryptocurrency mining campaign targeting Linux users with Go-based CHAOS malware (Trojan.Linux.CHAOSRAT). In November 2022, Trend Micro researchers discovered a cryptocurrency mining campaign targeting Linux users with Go-based CHAOS malware (Trojan.Linux.CHAOSRAT). Gather operating system information.

Mining 100
article thumbnail

Go-based Chaos malware is rapidly growing targeting Windows, Linux and more

Security Affairs

” reads the analysis published by Lumen Technologies. The analysis of the infections from mid-June to mid-July 2022 revealed that most of the bots are located in Europe, specifically Italy. ” continues the report. . ” continues the report.

Mining 88
article thumbnail

Panchan Golang P2P botnet targeting Linux servers in cryptomining campaign

Security Affairs

Researchers discovered a new Golang-based peer-to-peer (P2P) botnet, dubbed Panchan, targeting Linux servers in the education sector since March 2022. Akamai security researchers discovered a new Golang-based P2P Botnet, tracked as Panchan, that is targeting Linux servers that has been active since March 2022.

Mining 91
article thumbnail

RSAC insights: How IABs — initial access brokers — help sustain, accelerate the ransomware plague

The Last Watchdog

I had the chance at RSA Conference 2022 to visit with John Shier, senior security advisor at Sophos, a security software and hardware company. an operative who’s adept at, say, carrying out a crypto mining routine that saps processing power. Or the payload might be a data exfiltration routine — or a full-blown ransomware attack.

Access 235