Close Menu
    X (Twitter)
    Blockchain Journal
    • News
      • Blockchain News
      • Bitcoin News
      • Ethereum News
      • NFT
      • DeFi News
      • Polkadot News
      • Chainlink News
      • Ripple News
      • Cardano News
      • EOS News
      • Litecoin News
      • Monero News
      • Stellar News
      • Tron News
      • Press Releases
      • Opinion
      • Sponsored
    • Price Analisys
    • Learn Crypto
    • Contact
    • bandera
    Facebook X (Twitter) Instagram
    Blockchain Journal
    Home ยป An unusual botnet destroys hidden crypto-currency miners

    An unusual botnet destroys hidden crypto-currency miners

    0
    By BlockchainJournal on September 18, 2018 News
    Share
    Facebook Twitter LinkedIn Pinterest Email

    Specialists in the field of cyber security have discovered a new botnet, which instead of malicious actions searches for and destroys programs for hidden mining. This is reported by CoinDesk .

    Botnet called Fbot is a variation of the so-called Satori, which in turn is based on the Mirai program. The latter is often used for DDoS attacks. However, in the case of Fbot, the module for DDoS attacks is deactivated and replaced by the device search function with the software installed for hidden mining.

    The new botnet was investigated in detail by the Qihoo 360Netlab team. As noted in their blog, Fbot is looking for a malicious program called com.ufo.miner, which is a variation of the Monero miner called ADB.Miner. The latter is aimed at devices under the Android operating system.

    The program is distributed through open ports, and then deletes com.ufo.miner if it finds it. Fbot is programmed to scan the network, spread over it, install over malicious software, and then self-destruct.

    It is noteworthy that the botnet uses a decentralized alternative to EmerDNS instead of the standard Domain Name System (DNS). Because of this, the address is harder to track and close.

    "Choosing Fbot in favor of EmerDNS instead of the traditional DNS is quite interesting. This raised the bar for cybersecurity experts who find it difficult to track such a botnet (security systems can not cope because they are only searched for traditional DNS names) , "the researchers note.

    It is not yet clear whether Fbot was created with good intentions, or to eliminate competitors in the market.

    According to Trend Micro researchers, during the first half of 2017, the number of cases of unauthorized cryptomoney detection increased by 956% .

    Previously BlockchainJournal reported that new versions of the Firefox browser will be equipped with protection against hidden mining. Previously, the built-in blocker of the miners appeared in the Opera browser .

    Subscribe to BlockchainJournal news on Twitter !

    << aside id = "unisender_subscribe_form-10" class = "widget unisender_form">

    BlockchainJournal.news

    Cyber Security Featured Network Twitter
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
    BlockchainJournal

    Related Posts

    Telegram Wallet Now Allows Buying Tokenized Stocks on Telegram Following Its New Alliance with Kraken

    October 2, 20252 Mins Read

    Polymarket Prepares for Its Imminent U.S. Launch After Getting the Green Light from the CFTC

    October 2, 20252 Mins Read

    AlloyX and Polygon Partner with Standard Chartered to Launch a New Tokenized Money Market Fund

    October 2, 20252 Mins Read

    Killer Whales: Debate Highlights if Crypto Gaming and Security Investment Will Survive

    October 2, 20253 Mins Read

    FG Nexus and Securitize Join Forces to Tokenize Shares on Ethereum from Nasdaq

    October 2, 20253 Mins Read

    Bot Activity in Stablecoins Accounted for Over 70% of Trading Volume

    October 1, 20253 Mins Read

    Subscribe to Updates

    Get the latest creative news from FooBar about art, design and business.

    © 2025 Blockchain Journal

    Type above and press Enter to search. Press Esc to cancel.

    We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.