Lucene search
K

5 matches found

ThreatPost
ThreatPost
added 2019/06/04 10:0 a.m.223 views

Infosecurity Europe: Cryptojacking is Making a Comeback

LONDON, UK – With cryptocurrency prices skyrocketing, the threat of cryptomining malware, used to mine various types of cryptocurrencies, is continuing to worry the security industry. Case in point: Recently researchers uncovered the Nansh0u campaign, a cryptojacking campaign that mines an...

7.7AI score
Exploits0References3
The Hacker News
The Hacker News
added 2019/05/29 6:50 p.m.217 views

Hackers Infect 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit Malware

Cyber Security researchers at Guardicore Labs today published a detailed report on a widespread cryptojacking campaign attacking Windows MS-SQL and PHPMyAdmin servers worldwide. Dubbed Nansh0u, the malicious campaign is reportedly being carried out by an APT-style Chinese hacking group who has...

7.8CVSS2AI score0.78459EPSS
Exploits22
The Hacker News
The Hacker News
added 2019/05/29 6:50 p.m.1 views

Hackers Infect 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit Malware

Cyber Security researchers at Guardicore Labs today published a detailed report on a widespread cryptojacking campaign attacking Windows MS-SQL and PHPMyAdmin servers worldwide. Dubbed Nansh0u , the malicious campaign is reportedly being carried out by an APT-style Chinese hacking group who has...

7.8CVSS8AI score0.78459EPSS
Exploits22
ThreatPost
ThreatPost
added 2019/05/29 1:0 p.m.158 views

50k Servers Infected with Cryptomining Malware in Nansh0u Campaign

Up to 50,000 servers were infected over the past four months as part of a high-profile cryptojacking campaign, believed to orchestrated by Chinese-language adversaries. Researchers with Guardicore Labs, who disclosed the campaign Wednesday, said that the Nansh0u​ campaign named due to a text file...

7.2CVSS0.1AI score0.78459EPSS
Exploits22References6
Akamai Blog
Akamai Blog
added 1976/01/01 12:0 a.m.23 views

The Nansh0u Campaign – Hackers Arsenal Grows Stronger

In the beginning of April, three attacks detected in the Guardicore Global Sensor Network GGSN caught our attention. All three had source IP addresses originating in South-Africa and hosted by VolumeDrive ISP see IoCs...

7AI score
Exploits0
Rows per page
Query Builder