Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: BitcoinPorn on June 29, 2011, 05:42:59 PM



Title: Researchers find Malware Rigged with Bitcoin Miner - Shut Down!
Post by: BitcoinPorn on June 29, 2011, 05:42:59 PM
Good news everyone!
Quote
Researchers at Kaspersky Lab (disclosure: my employer (http://www.zdnet.com/blog/security/page/disclosure/324)) has discovered a new piece of malware that plans Bitcoin miners on infected computers.

The idea is to steal computer resources from infected computers to generate the valuable peer-to-peer virtual currency.

Kaspersky Lab’s Alex Gostev said (http://www.securelist.com/en/blog/208188132/Gold_rush) the new threat was discovered targeting Russian users with a Trojan that contains two components — a legitimate bcm.exe file BitCoin Miner (http://ufasoft.com/open/bitcoin/); and a malicious module that installs the bcm without the user’s knowledge and adds it to the autorun registry.

“The infected computer then starts to generate bit-coins for the Trojan’s author,” Gostev explained.

The malicious hacker behind the Trojan did not generate any riches from this attack because the system detected the mining activity coming from multiple IPs.

Quote
The Trojan is Infostealer.Coinbit and it has one motive: to locate your Bitcoin wallet.dat file and email it to the attacker…We have also discovered source code on underground forums which locates the wallet and, using FTP, uploads it to the attacker’s servers,” writes Symantec’s Stephen Doherty.

Oh wait, that wasn't good news at all.  Well it is in the sense that this story comes out because the person was stopped http://www.zdnet.com/blog/security/researchers-find-malware-rigged-with-bitcoin-miner/8934