Wannamine - a rising malware converts infected system into mine
Recently whole world faced one of the biggest malware attacks named Wannacry Ransomware Attack. Now another malware infection is detected which is Wannamine malware. Security researchers at Panda Security claimed that a crypto jacking malware was found in October 2017. Know what is wannamine malware in this article.
Wannacry is very aggressive malware. It enters in computer system and encrypts all the data of that system. You can't decrypt directly, you have to pay some money in the form of bitcoin cryptocurrency. Other they damage data permanently. So, it is called ransomware attack. More than 200000 computers were affected from 150 countries by Wannacry. But Wannimine basically starts mining Monero cryptocurrency after attacking a system. They don't ask for ransom because they already get money by mining. This technique is also known as crypto jacking. Crypto jacking is a weapon used by most of hackers to collect money from others computers. Recently some reports claimed that YouTube's advertising tool by cryptojacking.
Wannamine malware enters to computer using NSA's EternalBlue exploit and uses windows manager and powershell to run the script that mines Monero cryptocurrency silently. It doesn't affect to computer data or files. Therefore it is so difficult to find out or to detect. But you can see its effect on performance of the system it use a big part of RAM or processor so it slightly slow down your system. You are doing your work and simultaneously it does its work. With the help of your computer power they make money for them. Your system gets this malware by ads, Emails or different links on websites. After entering in to system it can take control of a remote access.
A report of CrowdStrike security claims that they have observed increase in number of Wannamine or cryptojacking infections. A perfect number of its infections can't be found as wannacry because it doesn't expose itself to victim.
Comments