Blue Mockingbird Monero-mining campaign exploits public-facing web apps
The Blue Mockingbird campaign deploys Monero cryptocurrency-mining payloads on Windows machines by exploiting web apps that implemented Telerik UI for ASP.NET AJAX.
The Blue Mockingbird campaign deploys Monero cryptocurrency-mining payloads on Windows machines by exploiting web apps that implemented Telerik UI for ASP.NET AJAX.
The attacks bear the hallmarks of the Iranian state-sponsored group known as “Charming Kitten.”
The Naikon APT group disappeared off radars in 2015, but it appears that they have not been idle.
Hackers set up a fake image-hosting website to disguise a web skimming operation.
It appears that the malware used in the operation was the Snake ransomware.
The vulnerability can be exploited via a MitM attack or by setting up a malicious TLS server and tricking a vulnerable client to connect to it.
The attackers exploited vulnerabilities in WordPress sites to redirect visitors to malvertising sites or plant a PHP backdoor.
The InfinityBlack group was involved in distributing hundreds of millions of stolen user credentials, hacking tools and malware.
Intelligence experts believe that Russia, Iran and China are likely behind cyber attacks against British research facilities.
The company is urging users to install the latest updates as soon as possible.
Showing elements 3891 - 3900