Published on September 8th, 2019 📆 | 7591 Views ⚑
0Malware uses Bitcoin blockchain to target victims
Cybersecurity firm TrendMicro has discovered a piece of malware that scans the Bitcoin blockchain for secret instructions that allow the infected computer to be controlled remotely. " data-reactid="19">Cybersecurity firm TrendMicro has discovered a piece of malware that scans the Bitcoin blockchain for secret instructions that allow the infected computer to be controlled remotely.Â
Glupteba, first discovered in 2011 by WeLiveSecurity, is a piece of malware that can be used to hijack someoneâs computer in order to steal information or be used to carry out denial of service attacks (where thousands of computers are used to put strain on a website or network causing it to crash). Itâs also been used to mine Monero, according to TrendMicro. " data-reactid="20">Glupteba, first discovered in 2011 by WeLiveSecurity, is a piece of malware that can be used to hijack someoneâs computer in order to steal information or be used to carry out denial of service attacks (where thousands of computers are used to put strain on a website or network causing it to crash). Itâs also been used to mine Monero, according to TrendMicro.Â
The bug hides inside adverts or links that unsuspecting users click onâa practice known as malvertisingâand then downloads itself on to the userâs machine. Once there, it then connects to the hackerâs chosen server giving them access to the infected computer. But every now and again, that connection gets disrupted, typically because it gets caught by anti-virus software, which blocks it from connecting it to the server. But more recently Glupteba has mutated, and now uses the Bitcoin blockchain to reconnect to the hackersâ server without anti-virus software noticing." data-reactid="21">The bug hides inside adverts or links that unsuspecting users click onâa practice known as malvertisingâand then downloads itself on to the userâs machine. Once there, it then connects to the hackerâs chosen server giving them access to the infected computer. But every now and again, that connection gets disrupted, typically because it gets caught by anti-virus software, which blocks it from connecting it to the server. But more recently Glupteba has mutated, and now uses the Bitcoin blockchain to reconnect to the hackersâ server without anti-virus software noticing.
" data-reactid="22">Â
According to TrendMicro, the hacker makes a Bitcoin transaction with a piece of encoded data hidden within one of its functions. Inside the encoded message contains the address for its serverâgiving the virus a new server location. All the virus has to do is scan the Bitcoin blockchain, identify the transaction and decode the hidden message. Then it can continue doing its evil deeds." data-reactid="23">According to TrendMicro, the hacker makes a Bitcoin transaction with a piece of encoded data hidden within one of its functions. Inside the encoded message contains the address for its serverâgiving the virus a new server location. All the virus has to do is scan the Bitcoin blockchain, identify the transaction and decode the hidden message. Then it can continue doing its evil deeds.
While this isnât the fault of the Bitcoin blockchain, itâs not the first time it has been used as a way of sharing secret, and frequently illegal information. " data-reactid="24">While this isnât the fault of the Bitcoin blockchain, itâs not the first time it has been used as a way of sharing secret, and frequently illegal information.Â
Gloss