Hackers Exploiting Microsoft Servers to Mine Monero - Makes $63,000 In 3 MonthsMining cryptocurrencies can be a costly investment as it takes a monstrous amount of computing power, and thus hackers have started using malware that steals computing resources of computers it hijacks to make lots of dollars in digital currency. Security researchers at security firm ESET have spotted one such malware that infected hundreds of Windows web servers with a malicious cryptocurrency miner and helps cybercriminals made more than $63,000 worth of Monero (XMR) in just three months. According to a report published by ESET today, cybercriminals only made modifications to legitimate open source Monero mining software and exploited a known vulnerability in Microsoft IIS 6.0 to secretly install the miner on unpatched Windows servers. Source : https://thehackernews.com/2017/09/windows-monero-miners.html?m=1 Experts at the ESET security company discovered cybercriminals who exploited Microsoft servers to mine Monero (XMR) and raised a total of $ 63,000 in three months of attack. Mining cripto-coins is a profitable business, but at the same time it is expensive because it requires a significant investment in computing power. The group of hackers known as "Crooks" is using malicious code that steals computing resources from the victim's machine for crypto-coin mining, and the number of such attacks continues to increase. The "Crooks" modified the mining code of Monero to exploit a vulnerability known as CVE-2017-7269 in Microsoft IIS 6.0 to deploy the miner to Windows servers. Funny that we still have webdav vulnerabilities in 2017. Windows servers are better off mining monero than serving websites anyway. FYI... IIS 6.0 came out with Windows Server 2003 and is no longer supported, also in Windows XP Pro 64bit. On top of that, there are companies that I've worked for in the past that had legacy apps running on these old servers and would put them on a "do not patch" list because they were afraid of causing unexpected conflicts with older legacy apps and then not having resources available to find and fix the problems. They know they are taking a risk but can't move and change fast enough to actually solve the problem, that was one good reason to leave. Edit: italics I find that hilarious, thanks for sharing. |
|
|
|
Ummm. Okay sure. Can somebody explain to me exactly why this clown has any credibility at all? He has a youtube channel and a domain name with "blockchain" in it. Massive privilege |
|
|
|
Its one of my favorite alts, but i think that massive airdrop to the bitcoin holders was mistake - its trying to find pricebottom but slightly still going downside. Technicals crying for a bounce.
Without any news positive news from outside it will be sliding more IMHO.
So what, let it slide, buy it cheap. If you really believe in the project and you're in it for the long run then just HODL and wait for value to come in naturally, at this time the price is purely speculative, pumping it with "positive news" only creates a bubble and opens opportunities for speculators and day traders. |
|
|
|
Zcash FUD against Monero will ramp up over the next several weeks. I'm targeting somewhere between .014-.016 as a bottom.
Nah I think their pump and dump is about to end in few days. |
|
|
|
Hi guys! Sorry for asking (noob here). Does this coin is CPU mineable?
Somewhat, nvidia cards have really unfair advantage over cpu and amd cards. |
|
|
|
good news, new script for this year and 2018, good to know that there is someone here and that likes the project as I like too ... wait more news ...
but is this for current ESP2 or is this plan for maybe ESP3? I'm forking ESP5 right now. Can this get any more convoluted? |
|
|
|
Hackers Exploiting Microsoft Servers to Mine Monero - Makes $63,000 In 3 MonthsMining cryptocurrencies can be a costly investment as it takes a monstrous amount of computing power, and thus hackers have started using malware that steals computing resources of computers it hijacks to make lots of dollars in digital currency. Security researchers at security firm ESET have spotted one such malware that infected hundreds of Windows web servers with a malicious cryptocurrency miner and helps cybercriminals made more than $63,000 worth of Monero (XMR) in just three months. According to a report published by ESET today, cybercriminals only made modifications to legitimate open source Monero mining software and exploited a known vulnerability in Microsoft IIS 6.0 to secretly install the miner on unpatched Windows servers. Source : https://thehackernews.com/2017/09/windows-monero-miners.html?m=1 I wonder why web admins use Linux servers 90% of the time. I still wonder why general consumers use Windows 90% of the time, despite the wannacry stuff and other fiascos. Using Snowden logic, windows is a professional OS with security guaranteed while Linux is a amateurish OS developed by amateurs that have no idea what they're doing. |
|
|
|
Hackers Exploiting Microsoft Servers to Mine Monero - Makes $63,000 In 3 MonthsMining cryptocurrencies can be a costly investment as it takes a monstrous amount of computing power, and thus hackers have started using malware that steals computing resources of computers it hijacks to make lots of dollars in digital currency. Security researchers at security firm ESET have spotted one such malware that infected hundreds of Windows web servers with a malicious cryptocurrency miner and helps cybercriminals made more than $63,000 worth of Monero (XMR) in just three months. According to a report published by ESET today, cybercriminals only made modifications to legitimate open source Monero mining software and exploited a known vulnerability in Microsoft IIS 6.0 to secretly install the miner on unpatched Windows servers. Source : https://thehackernews.com/2017/09/windows-monero-miners.html?m=1 Experts at the ESET security company discovered cybercriminals who exploited Microsoft servers to mine Monero (XMR) and raised a total of $ 63,000 in three months of attack. Mining cripto-coins is a profitable business, but at the same time it is expensive because it requires a significant investment in computing power. The group of hackers known as "Crooks" is using malicious code that steals computing resources from the victim's machine for crypto-coin mining, and the number of such attacks continues to increase. The "Crooks" modified the mining code of Monero to exploit a vulnerability known as CVE-2017-7269 in Microsoft IIS 6.0 to deploy the miner to Windows servers. Funny that we still have webdav vulnerabilities in 2017. Windows servers are better off mining monero than serving websites anyway. |
|
|
|
|
Whose dick I'll have to suck to get a stuck withdrawal processed? Your team keeps telling me they're "busy", busy with what exactly? What can they be busy with if not with clients requests?
|
|
|
|
Monero is now the preferred method of payment for illegal items on the deepweb and most silk road equivalents, I think that this will have a direct effect on the price and how much it will be worth in the future. I mean the whole selling point of this coin is anonymity and it worked to the tune of $90 per XMR, not to mention that it's 1:1 CPU to GPU, making it one of the only CPU mineable coins, it'll bounce above $150, as long as bad press is kept on the down low.
Please more bad press, I'm loving it. |
|
|
|
I'm not surprised at all with the low volume. Byteball not even started yet. This whole witnesses concept is completely new and untested... but also an unique opportunity to invest, as someone already said.
Byteball needs some marketing, especially for the merchant campaign. But it might be a good thing to finish with the distribution first, at least >75% finished. As for the 'untested' witness concept, the concept has been tested times and again in many applications but I get your point as it is an new feature for a cryptocurrency. I like tonych's attitude, keep quiet and dev on. If you build it they will come, only bullshit needs heavy marketing. |
|
|
|
|
Any idea if nethash is calculated correctly? I threw at it 12Mh/s been 2 hours no blocks yet, the nethash reports 17Mh/s but it seems that it is much higher.
|
|
|
|
Hi Claymore, any chance you can make this compatible with minergate's email address pool, like 9.7 was i'm tired of making different blockchain wallets .  They skim hashes and eat babies, shady fuckers, choose a more sane pool. |
|
|
|
what is the speed on a 1070?
Bitcore sp-mod #3 is faster...  i think i can touch 21Mh with more oc on spmod2 But #3 is more unstable on higher clocks. I need to fix the issues before releasing. Sp, you should just do 1 or 2% fees just like other miner, instead of getting 0.05 BTC, which u will have less vs hundred of thousands who will be using this dev-fee version. Been suggested countless times, sp is not budging on this. |
|
|
|
What are good pools for Zcoin?
zcash.flypool.org is the best one, there shouldn't be any doubts. It's the biggest one, it has more than 40% of hashrate of ZEC network.  You missed the whole point...my friend..... Zcoin != Zcash Can't blame him, so many Z - something - coins hard to keep track which is which. yes, zhitcoins. However, I read a comment by the great Snowden saying that zcash is devoloped by professionals, by people who knows what cryptography is. So it might be a good idea to invest in zcash. I don't know. Everything spooks say is an enigma, don't forget that zcash is closed source and the devs basically admitted on twitter they can introduce a backdoor to track "criminals" to comply with AML/KYC laws https://twitter.com/zooko/status/863202798883577856?lang=enSo no idea what Snowden has been smoking, he falls in that category in the eyes of US law, zcash devs would glady deanon his transactions yet he endorsed them, go figure. |
|
|
|
What are good pools for Zcoin?
zcash.flypool.org is the best one, there shouldn't be any doubts. It's the biggest one, it has more than 40% of hashrate of ZEC network. You missed the whole point...my friend..... Zcoin != Zcash Can't blame him, so many Z - something - coins hard to keep track which is which. |
|
|
|
i'm back mining eth for vga rx470, because xmr not profit
good for you. Why are we suppose to care ?? Thank god he stopped, the difficulty dropped quite a lot! |
|
|
|
Just curious because i've seen it repeated on this thread so many times. why is it difficult to get cryptonight coins listed on an exchange? And, does it have anything to do with monero? Are cryptonight coins more likely to be delisted by an exchange?  Requires a bit more work as it's not a mere clone of the bitcoin core wallet. Exchanges only have one address for all clients and credit their account based on payment id. |
|
|
|
Dev, can you try to add iridium on this exchange: https://stocks.exchange/ ? They have few coins trading at the moment and it seems the requirements are still pretty low (free), for a couple of days they added such new coins as PGC and WHL Do not! It might be a scam exchange, like bitzure. Okay, right now the top choice is coinexchange.io, then YoBit. There is also https://www.southxchange.com, which has listed Masari, a CryptoNote coin. This is actually a big deal, as there is no other exchange that I have seen actively listing CryptoNote coins. I am not affiliated with this site, and you need to be just as careful with this as with stuff like https://stocks.exchange/. But the Masari listing proves https://www.southxchange.com will take CryptoNote coins, which means they could become the next big alt-Monero marketplace if they're not a scam. No idea where that is coming from Monero is listed pretty much everywhere. |
|
|
|
Oh great, an unofficial mobile wallet. If this doesn't smell like a great scam to steal a shitload of wallets i don't know what does... It's also nice because they can't just steal your Monero, they can steal every other crypto you have on your mobile as well, gotta love mobile wallets and the mobile system security. Be warned. No idea why mobile wallets even exist, I don't trust my andorid at all, everyone is clueless what the OS is doing and what vulnerabilities or even backdoors may lurk, why would you deposit cryptocurrency on such a device is beyond me. Consider a very big portion of all banking is done on mobile devices these days, this problem is not limited to crypto. Mobile apps can be safe but using a 3rd party app from some unknown anonymous random guy on teh interwebs, sounds very safe! How can I trust the apps if I can't trust the OS? |
|
|
|
|
Show Posts
