Malwarehigh

A Cryptomining botnet abuses Bitcoin blockchain transactions as C2 backup mechanism

Security Affairsby @securityaffairsFeb 24, 2021 · 20:52 UTC (Feb 24, 2021)3 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2015-1427 CVE-2019-9082

Tags: cve-2015-1427 cve-2019-9082 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2015-1427	Sandbox Bypass RCE in Elasticsearch Groovy Scripting Engine	—	100%	KEV	— KEV Mar 25, 2022
CVE-2019-9082	Unauthenticated RCE in ThinkPHP < 3.2.4 (Open Source BMS, ZzzCMS zzzphp)	8.8	97%	KEVPoC ×3	Feb 24, 2019 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

Crooks are exploiting BTC blockchain transactions to hide backup command-and-control (C2) server addresses for a cryptomining botnet. Security experts from Akamai have spotted a new botnet used for illicit cryptocurrency mining activities that are abusing Bitcoin (BTC) transactions to implement a backup mechanism for C2.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.