~/talk

Rise of Coinminers

Talkat BSidesSF 2018 · on Sunday, 2018-04-15· [security]
links:none on file
slides:none on file

Coinminers surge is real: traffic detection jumps 8500% increase in 2017 and Monero dominates because it’s CPU‑friendly. Common tooling includes Coinhive and XMRig embedded in malware, miners pause when Task Manager opens and even kill competing miners. Automated pool API scraping links wallets to payouts — one campaign (PhotoMiner) nets $8–12M across ~500 samples. Defenses shown include network blocklists, Snort templates and an open‑source PowerShell eradicator that successfully clears miners in tested environments.

AI-written summary · about

  1. 0:00Introduction to coin miners
  2. 1:12Coin miner threat landscape
  3. 3:25Common traits of coin miners
  4. 6:17XMRig and detection methods
  5. 9:34Coin miner evasion techniques
  6. 12:03Tracking attackers via mistakes
  7. 13:33Measuring miner profits
  8. 15:42Ghost miner case study
  9. 16:46Future of coin miners
  10. 18:11Detection and prevention recap
  11. 20:06Q&A session
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.