[ad_1]
According to a new report, a malicious botnet has been targeting Microsoft SQL database servers to mine cryptocurrency for two years.
Guardicore Labs said Wednesday that in the past few weeks alone, hackers have managed to infect 2,000 to 3,000 servers per day. As reported by Hacker News, the botnet has been nicknamed “Vollgar” after the vollar cryptocurrency it mines alongside monero (XMR) and its “vulgar” way of operating.
The attack brute-force passwords to access servers with poor security. Once inside, it makes configuration changes allowing hackers to execute malicious commands and download malware binaries.
According to the report, health care, aviation, IT, telecommunications and education entities in China, India, South Korea, Turkey and the United States were affected.
The compromised computer network was used to house all of the attackers’ infrastructure, with its main command and control server based in China, according to Guardicore. That itself had been compromised by multiple attackers, the company added.
To help companies find out if their servers have been infected with this attack, Guardicore has released a script on GitHub.
In other security news, ZDNet reported earlier this week that QR codes – now ubiquitous in the bitcoin industry as a means of making bitcoin payments easier – have become another vector of attack.
The incredibly simple attack saw malicious actors providing a supposed service that allows people to create a QR code for payments to their bitcoin addresses. However, the address entered was that of the attacker.
Harry Denley, director of security at MyCrypto, discovered the pattern hosted on nine websites. According to the report, around $ 45,000 worth of bitcoin (BTC) has been stolen in the past month.
For the record, it is advisable to avoid these sites at all costs: bitcoin-barcode-generator.com, bitcoinaddresstoqrcode.com, bitcoins-qr-code.com, btc-to-qr.com, create, bitcoin-qr-code. com, free-bitcoin-qr-codes.com, freebitcoinqrcodes.com, qr-code-bitcoin.com and qrcodebtc.com
[ad_2]Source link
