Researchers have discovered a new XMR miner hiding its presence in the system

Cyber security company Varonis has discovered a new miner virus that stealthily extends Monero cryptocurrency (XMR) on users' devices.

The company’s report said that a feature of the miner called Norman is that it is difficult to detect in the system. So, when you open the task manager on a Windows device, the program ends the mining process. Accordingly, after closing the task manager, the miner restarts. Thus, the user does not even realize that his computer is infected.

The program is mining Monero through the popular miner XMRig. For installation, the Nullsoft Scriptable Install System (NSIS) installation program creation system is used, and the svchost system process is used to launch the virus itself.

Also, Varonis experts came to the conclusion that the virus could be created by developers from France or some other French-speaking country.

“The SFX file contained comments in French. This suggests that the French version of WinRAR was used to create the file, ” company representatives said.

BlockchainJournal previously reported a hidden BlackSquid miner mining Monero .

Subscribe to BlockchainJournal news on Facebook !