Login

News Post

Researchers spot cryptojacking attack that disables endpoint protections

ArstechnicaArstechnica · 4m
Researchers spot cryptojacking attack that disables endpoint protections

Researchers have identified sophisticated malware that disables antivirus protections, removes evidence of infection, and permanently installs cryptocurrency-mining software on machines. The malware, named GhostEngine, targets endpoint security solutions and hides any sign of a breach by disabling Windows event logs. Once active, GhostEngine scans for endpoint protection software and uses known vulnerabilities to gain access to the core of the operating system, eventually installing cryptocurrency-mining software that deposits the coins into an attacker-controlled wallet. The malware also establishes persistent access and can act as a backdoor, allowing remote command execution on the infected machine.

2
View Source

Comments

More Like this

What is DDOS attack? Malicious cyber attack that delayed Musk - Trump interview

What is DDOS attack? Malicious cyber attack that delayed Musk - Trump interview

Web apps and APIs were attacked more than ever last year

Web apps and APIs were attacked more than ever last year

Apple warns of mercenary spyware attacks in 98 countries

Apple warns of mercenary spyware attacks in 98 countries

WordPress websites are being hacked to hijack your browser — and then attack other sites

WordPress websites are being hacked to hijack your browser — and then attack other sites

How DDoSers used the HTTP/2 protocol to deliver attacks of unprecedented size

How DDoSers used the HTTP/2 protocol to deliver attacks of unprecedented size

Thousands of servers hacked in ongoing attack targeting Ray AI framework

Thousands of servers hacked in ongoing attack targeting Ray AI framework

Discord took no action against server that coordinated costly Mastodon spam attacks | TechCrunch

Discord took no action against server that coordinated costly Mastodon spam attacks | TechCrunch

Cyber attack compromised Indonesia data centre, ransom sought, reports Antara

Cyber attack compromised Indonesia data centre, ransom sought, reports Antara

SMBs are being hit with more malware attacks than ever, and many can't keep up

SMBs are being hit with more malware attacks than ever, and many can't keep up

Apple users targeted in phishing attack: How to protect your iPhone

Apple users targeted in phishing attack: How to protect your iPhone

Download the medial app to read full posts, comements and news.