United

Bitcoin

April

Read

Security

<p class="is-style-lead">Kaspersky unveils StripedFly, a stealthy malware posing as a crypto miner, compromising over a million Windows and Linux systems globally since 2016.</p>
<p>For over half a decade, a dangerous malware dubbed “StripedFly” has been lurking in the shadows, posing as a crypto mining software. Leading antivirus developers, <a href="https://securelist.com/stripedfly-perennially-flying-under-the-radar/110903/" target="_blank" rel="noopener noreferrer nofollow">Kaspersky</a> reported that this duplicitous malware has compromised over a million Windows and Linux systems worldwide since 2016.</p>
<p>Kaspersky’s cybersecurity team initiated their investigation into StripedFly last year. They were tipped off by anomalies within their antivirus software, which changed certain functions in the Windows OS.&nbsp;</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Our new research on sophisticated <a href="https://twitter.com/hashtag/StripedFly?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#StripedFly</a> malware: <a href="https://t.co/vtwmqL4Lyt" target="_blank" rel="noopener noreferrer nofollow">https://t.co/vtwmqL4Lyt</a></p>— Sergey Lozhkin (@61ack1ynx) <a href="https://twitter.com/61ack1ynx/status/1717396249933213872?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">October 26, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<h2 class="wp-block-heading" id="kaspersky-s-investigation">Kaspersky’s investigation&nbsp;</h2>
<p>A striking discovery during the investigation was StripedFly’s use of an <a href="https://www.hypr.com/security-encyclopedia/eternalblue" target="_blank" rel="noopener noreferrer nofollow">EternalBlue</a> variant. This exploit, originally developed by the United States National Security Agency (NSA), became infamous after it was illegally disclosed and subsequently employed in the 2017 WannaCry <a href="https://crypto.news/us-doj-to-double-its-crypto-team-target-ransomware-crimes/" rel="noopener noreferrer nofollow">ransomware</a> attacks that affected numerous Windows systems globally.</p>
<p>You might also like: <a href="https://crypto.news/two-tries-left-swiss-entrepreneurs-243m-bitcoin-drama/" rel="noopener noreferrer nofollow"> Two tries left: Swiss entrepreneur’s $243m Bitcoin drama </a></p>
<p>StripedFly leverages its unique variant of EternalBlue to worm its way into unpatched Windows systems, from where it can traverse across a network to include Linux machines. Once in the system, it’s capable of collecting a wide range of sensitive information, including login details and personal data.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Timeline of <a href="https://twitter.com/hashtag/stripedfly?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#stripedfly</a> <a href="https://twitter.com/hashtag/thesas2023?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#thesas2023</a> <a href="https://t.co/qKKzPfLniZ" target="_blank" rel="noopener noreferrer nofollow">pic.twitter.com/qKKzPfLniZ</a></p>— Kaspersky (@kaspersky) <a href="https://twitter.com/kaspersky/status/1717390570048631079?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">October 26, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The origins of StripedFly remain a mystery. Though it uses the same techniques as EternalBlue, that particular code was only made publicly available in April 2017 by a group called the “Shadow Brokers.” However, Kaspersky disclosed that the earliest detection of StripedFly dates back to April of 2016. Also, a version of this mysterious malware has appeared in a ransomware attack named ThunderCrypt.</p>
<p>Microsoft released a patch for EternalBlue back in early 2017, which also works against StripedFly. Unfortunately, using outdated windows has been a rather common user behavior over the years, which is why over a million devices have been breached by StripedFly so far.&nbsp;</p>
<p>Read more: <a href="https://crypto.news/doj-asked-to-mull-criminal-charges-against-binance-and-tether/" rel="noopener noreferrer nofollow"> DoJ asked to mull criminal charges against Binance and Tether </a></p>

StripedFly malware targets more than a million PCs, disguising as a crypto miner

Table of Contents

crypto.news

Other articles published on Oct 26, 2023

Bitcoin Approaches Golden Cross: Will the Price Rise Further?

BlockFi files for bankruptcy and allows withdrawals from wallets.

AT&T Stock Forecast: Will T Stock Price Break Above $16 Level?

Bitcoin Price Hits the Highest Level in 30 Months: What Comes Next?

ARK Investments Sells GBTC Shares Amid Bitcoin ETF Speculation and Surging Crypto Market

Astar Network launches zKatana layer-2 scaling solution on public testnet

Join our free newsletter for daily crypto updates!