Monero

Flash

when

Read

Hackers are actively exploiting critical vulnerabilities in older versions of Rejetto’s HTTP File Server to install Monero mining malware and other malicious software.
Hackers have found a way to exploit older versions of the HTTP File Server (HFS), a software designed for publishing and sharing files, to deploy malicious <a href="https://crypto.news/tag/monero/" target="_blank" rel="noopener noreferrer nofollow">Monero</a> mining software, BleepingComputer <a href="https://www.bleepingcomputer.com/news/security/hackers-attack-hfs-servers-to-drop-malware-and-monero-miners/" target="_blank" rel="noopener noreferrer nofollow">reports</a>, citing data from cybersecurity firm AhnLab.
The exploit, which appears to be centered around a critical vulnerability identified in HFS versions up to and including 2.3m, allows threat actors to execute arbitrary commands remotely without requiring authentication, enabling attackers to take control with ease.
Read more: <a href="https://crypto.news/flash-exploited-cryptojackers-mine-monero-over-100-instances-flagged-adobe/" rel="noopener noreferrer nofollow"> Flash exploited by cryptojackers to mine Monero, over 100 instances flagged by Adobe </a>
AhnLab has reportedly documented multiple instances when attackers deploy a variety of malicious payloads beyond simple system compromise, including tools like XMRig, a software designed to <a href="https://crypto.news/tag/mining/" target="_blank" rel="noopener noreferrer nofollow">mine</a> Monero (<a href="https://crypto.news/price/monero/" target="_blank" rel="noopener noreferrer nofollow">XMR</a>), and remote access trojans (RATs) such as XenoRAT and Gh0stRAT. The scale of these attacks and the amount of Monero mined remain unclear though.
In response to the exploit, Rejetto reportedly issued warnings, confirming the bug and advising against the use of versions 2.3m through 2.4, describing them as “dangerous and should not be used anymore.”
Cybercriminals usually favor installing XMRig on infected devices due to Monero’s high privacy features, which make transactions difficult to trace. XMRig’s efficiency and versatility also allow it to run on various hardware, and its open-source nature facilitates easy modification. Additionally, it can run stealthily in the background of a computer’s processes, minimizing the chance of being detected.
You might also like: <a href="https://crypto.news/hackers-exploit-confluence-vulnerability-crypto-mining-malware/" rel="noopener noreferrer nofollow"> Hackers exploit Confluence vulnerability to plant crypto mining malware </a>

Hackers exploit old HTTP File Server to install Monero miners

crypto.news

Other articles published on Jul 5, 2024

US Regulators Causing Panic of Crypto Banking Services, Former Solicitors General Accuses

BTC/SOL Price Prediction: Bitcoin Price Drops 6% As Stocks Recover From Dip

Crypto Winter Looms: Bitcoin, Ethereum Lead Market Decline

Biggest Altcoin Gainers of the First Week of July 2024

2 Meme Coins Crash: Time to Cut Your Losses?

Bitcoin Faces Potential Downward Pressure from Mt. Gox Repayments

Join our free newsletter for daily crypto updates!