Microsoft under fire from a botnet digging cryptocurrencies. 3000 servers are infected daily

By bestdaro | Crypto-My-News | 2 Apr 2020


  It turns out that a botnet has been attacking Microsoft SQL database servers to extract cryptocurrencies with them for two years. The information was provided to Guardicore Labs media.

  In the past few weeks alone, hackers have managed to infect almost 2,000 to 3,000 servers a day. As reported by Hacker News, the botnet was named "Vollgar". It's about the name of the cryptocurrency v-dimension (vollar), which it extracts while kicking monero (XMR).

351665157-89dc6c0d6f81c1463be17f4af6660feff15917c7641dc4fa8f59d804b66f6ed1.jpeg   VS   351665157-e7767f604f9d2db65f7259a1c34dc8382c4da547b978f3574ce8d1cf057d2d6b.jpeg

  Botnet tries to access servers with a low level of security. After taking over, it performs configuration changes, thus enabling hackers to perform any illegal activities, mainly focused on background mining of digital currencies.

  According to the report, the attacks affect many sectors, including healthcare, logistics companies, IT, telecommunications and education. The countries where the attacked servers are located are: China, India, South Korea, Turkey and the United States.

  The network of attacked computers was used to host the entire attacking infrastructure, and its main server is - as it turns out - located in China. At least that's what Guardicore thinks.

  To help companies find out if their servers were infected with this attack, Guardicore released a special script that is available on GitHub.

Other threats

  In another type of threat informed ZDNet. It turns out that QR codes - now ubiquitous, e.g. in the cryptocurrency industry as a means of facilitating payments with bitcoins and other digital currencies - have become another hacker tool.

  Their new method is shockingly simple. The attack consists in the fact that hackers have made available on the network a service that allows creating a QR code for payments in cryptocurrencies. The catch, however, was that the generated codes sent funds to addresses in the BTC blockchain belonging to fraudsters. In other words, the person who used the tool properly legally sent their funds to the address of the hackers.

  Harry Denley, security director at MyCrypto, discovered that the program was available on nine websites. According to his report, around $ 45,000 in Bitcoins (BTC) was stolen in this crafty way over the past month.

How do you rate this article?

4


bestdaro
bestdaro

Hi. I am a Polish man who wanted to have so many cryptocurrencies to buy a Mustang... lol


Crypto-My-News
Crypto-My-News

briefly and to the point in news from the world of Crypto

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.