2024

Cryptocurrency

Security

A new type of malware called PG_MEM has been discovered that targets PostgreSQL, a popular database system that is widely used online. 
According to <a href="https://www.aquasec.com/blog/pg_mem-a-malware-hidden-in-the-postgres-processes/" target="_blank" rel="noreferrer noopener nofollow">Aqua</a>, a cybersecurity company, takes advantage of weak passwords to install software that mines cryptocurrency, putting over 800,000 databases at risk. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Aqua Nautilus just uncovered PG_MEM—a stealthy new malware targeting PostgreSQL databases! 🚨 This crafty threat brute forces its way in, hides its tracks, and even mines cryptocurrency right under the radar. Want to know how it works and, more importantly, how to stop it? 🤔…— Aqua Security (@AquaSecTeam) <a href="https://twitter.com/AquaSecTeam/status/1826341822517707093?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">August 21, 2024</a>
 </blockquote> 
 </div>
</figure> 
PG_MEM works by trying to guess weak passwords to break into databases. Once it gains access, it creates a new user with high-level privileges. The malware then installs mining software and connects to a mining pool. 
This means the infected database’s computing power is used to mine cryptocurrency, while the malware hides its presence and prevents other hackers from accessing the system. 
Cryptojacking, where malware secretly uses a computer’s power to mine cryptocurrency, has become more common. Reports show that such attacks increased by 400% in the first half of 2023. This highlights the need for better security to protect against these types of threats. 
To address this issue, some companies are offering solutions like Aethir’s decentralized cloud infrastructure. They use unused computing resources from data centers to provide affordable and scalable computing services, helping to reduce the risk of exploitation. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/08/17/styx-stealer-malware-targets-cryptocurrency-users/" target="_blank" rel="noreferrer noopener">Styx Stealer Malware Targets Cryptocurrency Users</a> 
</blockquote>

Malware Targets PostgreSQL Databases for Crypto Mining

The Crypto Times

Other articles published on Aug 22, 2024

Why is cross-chain important?

New 'Japanese' Dogecoin (DOGE) Listing Hits Binance

CBDC Debate: Freedom vs. Control, Experts Weigh In

Animoca Brands-Backed Soulbound Raises $4 Million for Web3 Social Gaming

Ethereum’s Gas Fees Dive to Lowest Since Mid-2019 Amid Increased Layer 2 Transactions

Balanced Goes Live on Injective for Cross-Chain Crypto Swaps

Join our free newsletter for daily crypto updates!