Mining Botnets Reemerge, Bringing Shifts into the Threat Landscape
summary
Three case studies show concrete shifts: an AutoIt-to-AutoHotkey family pivots from credential theft to Monero mining, spreads via USB worm spreader, beacons a CNC, and ultimately moves to a private Monero pool after public pools ban it (one wallet shows ~1,057 XMR mined over months). Another uses a locally installed Chrome extension via Facebook messenger to propagate and fetch payloads from a CNC repository. A third packages XMRig as an XMRig injector loader with plain‑text C2 and HWID tracking. Buyers demand silent mining, persistence and FUD.
AI-written summary · about
chapters (4)
related talks
21mRise of Coinminers
55mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
18mBehind enemy lines
15mTales from the Underground: Hilarious Cybercrime Fails!!
49mThe State Of Malware From The Eye Of The Tiger
01h 02mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
33mOperation GamblingPuppet: Analysis of a Multivector and Multiplatform Campaign Targeting Online ...
39mFortifying DevOps: Understand and Fight Botnets Threats