New Cryptocurrency Mining Malware Infected Over 500,000 PCs in Just Few Hours

Two days ago, Microsoft encountered a rapidly spreading cryptocurrency-mining malware that infected almost 500,000 computers within just 12 hours and successfully blocked it to a large extent. Dubbed Dofoil, aka Smoke Loader, the malware was found dropping a cryptocurrency miner program as payloa...

2017’s Biggest Threats and What CISOs Can do to Mitigate Risks in 2018

Enterprise Risk Management ERM is getting harder every day. According to the World Economic Forum‘s 2018 Global Risks Perception Survey, cyber attacks and data theft are 3 and 4 respectively of the top 5 likely risks organizations will face this year. This is not surprising, in 2017 CISOs the wor...

ComboJack Malware Steals Cryptocurrency by Modifying Addresses

By Waqas A new cryptocurrency-stealing malware dubbed as ComboJack has been discovered This is a post from HackRead.com Read the original post: ComboJack Malware Steals Cryptocurrency by Modifying Addresses...

Hacker returns $17 million worth of stolen Ethereum

By Carolina In July of last year, an Israeli cryptocurrency venture called This is a post from HackRead.com Read the original post: Hacker returns $17 million worth of stolen Ethereum...

Week in security (February 26 – March 4)

Last week on Malwarebytes Labs, we explained how to protect your computer from malicious cryptomining, we gave an encryption 101 lesson using ShiOne ransomware as a case study, and we offered an explanation about SQL injection. We also released a report on the state of malicious cryptomining from...

600 Powerful Bitcoin-Mining Computers Worth $2 Million Stolen In Iceland

Around 600 powerful devices specifically designed for mining bitcoin and other cryptocurrencies have been stolen from Icelandic data centers in what has been dubbed the "Big Bitcoin Heist." To make a profit, so far criminals have hacked cryptocurrency exchanges, spread mining malware, and...

Mining is the new black

UPDATED March 5th, 15.00 Last year we published a story revealing the rise of miners across the globe. At the time we had discovered botnets earning millions of USD. We knew this was just the beginning of the story, which turned out to develop rapidly. Together with the rest of the world, we have...

Stolen: 600 Bitcoin Mining Computers in Iceland & 153 from Malaysia

By Waqas Bitcoin is a kind of cryptocurrency which every user, hacker, This is a post from HackRead.com Read the original post: Stolen: 600 Bitcoin Mining Computers in Iceland & 153 from Malaysia...

Beware; rTorrent Client Exploited to Mine Monero Cryptocurrency

By Waqas rTorrent Client Exploited to Mine Monero Cryptocurrency Thanks to XML-RPC This is a post from HackRead.com Read the original post: Beware; rTorrent Client Exploited to Mine Monero Cryptocurrency...

This Week in Security News: Trends and Tea Parties

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, the U.S. official in charge of election security was replaced, Trend Micro hosted a tea party in rural Taiwan, and a new cryptocurrency mino...

Ad Network Circumvents Ad-Blocking Tools To Run In-Browser Cryptojacker Scripts

Cryptojackers are getting resourceful and have figured out how to bypass ad-blocking software and deliver the Coinhive JavaScript miner via browser-based ads. Researchers at Qihoo’s Netlab 360 said it recently spotted an advertising network that was using what is called a domain generation...

RIG malvertising campaign uses cryptocurrency theme as decoy

For a couple of weeks, we have been observing a malvertising campaign that uses decoy websites to redirect users to the RIG exploit kit. Those sites, whose theme is about cryptocurrencies, were all registered recently and are swapped after a few days of use. The initial redirection starts off fro...

Third party CSS is not safe

A few days ago there was a lot of chatter about a 'keylogger' built in CSS. Some folks called for browsers to 'fix' it. Some folks dug a bit deeper and saw that it only affected sites built in React-like frameworks, and pointed the finger at React. But the real problem is thinking that third part...

A week in security (February 19 – February 25)

Last week on Malwarebytes Labs, we gave readers a primer on encryption, took a stab at that Deepfakes tool Internet users seem to be interested in, and started a new series that talks about GDPR. We also looked at a drive-by download campaign that starts in booby-trapped Chinese websites that dro...

LA Times website hacked to mine Monero cryptocurrency

By Waqas Another day, another Monero cryptocurrency miner - This time, the target This is a post from HackRead.com Read the original post: LA Times website hacked to mine Monero cryptocurrency...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 19, 2018

Earlier this week, Trend Micro released its Security Roundup for 2017, which reveals an increase in ransomware, cryptocurrency mining and business email compromise BEC attempts over the past year as cybercriminals refined and targeted their attacks for greater financial return. Surprisingly, some...

Cryptojacking Attack Found on Los Angeles Times Website

Researchers said they found cryptojacking code hidden on the Los Angeles Times’ interactive Homicide Report webpage that was quietly harnessing visitors’ CPUs to mine Monero cryptocurrency. The cryptojacking incident was found by Troy Mursch, a security researcher at Bad Packets Report, on...

Hackers Compromise Tesla Cloud Server to Mine Cryptocurrency

By Waqas It is 2018 and the easiest way to make quick This is a post from HackRead.com Read the original post: Hackers Compromise Tesla Cloud Server to Mine Cryptocurrency...

TrickBot Variant Steals Bitcoin by Hijacking Cryptocurrency Transactions

By Waqas Another day, another malware - This time TrickBot's variant is This is a post from HackRead.com Read the original post: TrickBot Variant Steals Bitcoin by Hijacking Cryptocurrency Transactions...

This Week in Security News: Senate Hearings and Equifax Breaches

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, leaders of six security agencies testified before the Senate Intelligence Committee, the Equifax hack grew in severity, and hackers used the...