Monero

Flash

when

Read

Hackers are actively exploiting critical vulnerabilities in older versions of Rejetto’s HTTP File Server to install Monero mining malware and other malicious software.
Hackers have found a way to exploit older versions of the HTTP File Server (HFS), a software designed for publishing and sharing files, to deploy malicious <a href="https://crypto.news/tag/monero/" target="_blank" rel="noopener noreferrer nofollow">Monero</a> mining software, BleepingComputer <a href="https://www.bleepingcomputer.com/news/security/hackers-attack-hfs-servers-to-drop-malware-and-monero-miners/" target="_blank" rel="noopener noreferrer nofollow">reports</a>, citing data from cybersecurity firm AhnLab.
The exploit, which appears to be centered around a critical vulnerability identified in HFS versions up to and including 2.3m, allows threat actors to execute arbitrary commands remotely without requiring authentication, enabling attackers to take control with ease.
Read more: <a href="https://crypto.news/flash-exploited-cryptojackers-mine-monero-over-100-instances-flagged-adobe/" rel="noopener noreferrer nofollow"> Flash exploited by cryptojackers to mine Monero, over 100 instances flagged by Adobe </a>
AhnLab has reportedly documented multiple instances when attackers deploy a variety of malicious payloads beyond simple system compromise, including tools like XMRig, a software designed to <a href="https://crypto.news/tag/mining/" target="_blank" rel="noopener noreferrer nofollow">mine</a> Monero (<a href="https://crypto.news/price/monero/" target="_blank" rel="noopener noreferrer nofollow">XMR</a>), and remote access trojans (RATs) such as XenoRAT and Gh0stRAT. The scale of these attacks and the amount of Monero mined remain unclear though.
In response to the exploit, Rejetto reportedly issued warnings, confirming the bug and advising against the use of versions 2.3m through 2.4, describing them as “dangerous and should not be used anymore.”
Cybercriminals usually favor installing XMRig on infected devices due to Monero’s high privacy features, which make transactions difficult to trace. XMRig’s efficiency and versatility also allow it to run on various hardware, and its open-source nature facilitates easy modification. Additionally, it can run stealthily in the background of a computer’s processes, minimizing the chance of being detected.
You might also like: <a href="https://crypto.news/hackers-exploit-confluence-vulnerability-crypto-mining-malware/" rel="noopener noreferrer nofollow"> Hackers exploit Confluence vulnerability to plant crypto mining malware </a>

Hackers exploit old HTTP File Server to install Monero miners

crypto.news

Other articles published on Jul 5, 2024

Crypto Billionaire Justin Sun Offers To Buy Bitcoin Off-Market From German Government To Minimize...

Joana Cotar Urges German Government to Halt Bitcoin Sales

Fib Analysis Reveals XRP Is on The Verge of Major Price Breakthrough

According to this indicator, the biggest buying opportunity is in these eight altcoins!

Is Bitcoin Price Crash Far from Over? Here is the Untold Story

Notcoin Launches Telegram Mini-Apps and Partners with Helika for Web3 Gaming

Join our free newsletter for daily crypto updates!