Even though cryptocurrency prices have fallen, cybercriminals could still take advantage of mining software, and not for the reasons you think.
Instead of creating alternative currencies, cryptomining software could be used for a more sinister attack that could steal corporate secrets, according to Troy Kent, a threat researcher at Awake Security. He presented his research at the InfoSecurity North America Conference in New York earlier this month.
“With this attack, people are using a tool, a crypto miner that they’re used to seeing on their network. But they’re not used to responding to it as though it is a legitimate threat, like a botnet or a Trojan,” Kent said in an interview with CNBC. “They can come in and they can steal files, they can steal intellectual property, they can steal credentials and then log in as maybe the CEO. Or they can download more software. They can bring down services.”
Kent said he is unsure whether hackers are already using this technique to attack companies, but wanted to share his research so businesses can be on guard.
“If I can do it, then absolutely an attacker could do it, whether they’re very sophisticated or not sophisticated at all,” he said.
The threat is stealthy and cybersecurity teams may have trouble finding it. “Depending on the type of detection that they’re using, it’s very possible that they [businesses] would miss this attack, or at least deprioritize it, or dismiss it as only a miner,” Kent said
The attack begins like cryptojacking, when hackers take over your computer to mine cryptocurrencies for their profit.
To protect themselves, Kent suggests companies adopt more advanced detection methods based on behavior and analytics.
Source: CNBC
Picture: pixabay.com
Read more:
25 Canada Square, Level 33, office 50, Canary Wharf London, E14 5LQ +44 20 3608 6256
World Financial Markets - 0700 17 600 Varchev Exchange - 0700 115 44
Varchev Finance Ltd is registered in the FCA (FINANCIAL CONDUCT AUTHORITY) with a passport in the United Kingdom: FCA, United Kingdom - registration number: 494 045, which allows provision of financial services in the United Kingdom.
Varchev Finance Ltd strictly comply with the statutes of the European directive MiFID (Markets in Financial Instruments). targeting increased efficiency, transparency and uniformity of financial instruments.
Varchev Finance Ltd is authorized and regulated by the Financial Supervision Commission - Sofia, Bulgaria: License number RG-03-02-05 / 15.03.2006
The information on this site is not intended for distribution or use by any person in any country or jurisdiction where such distribution or use would be contrary to local law or regulation.
Disclaimer:
CFDs are complex instruments and come with a high risk of losing money rapidly due to leverage. 63,41% of retail investor accounts lose money when trading CFDs with this provider. You should consider whether you understand how CFDs work, and whether you can afford to take the high risk of losing your money.