2024

Cryptocurrency

Security

A new type of malware called PG_MEM has been discovered that targets PostgreSQL, a popular database system that is widely used online. 
According to <a href="https://www.aquasec.com/blog/pg_mem-a-malware-hidden-in-the-postgres-processes/" target="_blank" rel="noreferrer noopener nofollow">Aqua</a>, a cybersecurity company, takes advantage of weak passwords to install software that mines cryptocurrency, putting over 800,000 databases at risk. 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
 <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 Aqua Nautilus just uncovered PG_MEM—a stealthy new malware targeting PostgreSQL databases! 🚨 This crafty threat brute forces its way in, hides its tracks, and even mines cryptocurrency right under the radar. Want to know how it works and, more importantly, how to stop it? 🤔…— Aqua Security (@AquaSecTeam) <a href="https://twitter.com/AquaSecTeam/status/1826341822517707093?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">August 21, 2024</a>
 </blockquote> 
 </div>
</figure> 
PG_MEM works by trying to guess weak passwords to break into databases. Once it gains access, it creates a new user with high-level privileges. The malware then installs mining software and connects to a mining pool. 
This means the infected database’s computing power is used to mine cryptocurrency, while the malware hides its presence and prevents other hackers from accessing the system. 
Cryptojacking, where malware secretly uses a computer’s power to mine cryptocurrency, has become more common. Reports show that such attacks increased by 400% in the first half of 2023. This highlights the need for better security to protect against these types of threats. 
To address this issue, some companies are offering solutions like Aethir’s decentralized cloud infrastructure. They use unused computing resources from data centers to provide affordable and scalable computing services, helping to reduce the risk of exploitation. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/08/17/styx-stealer-malware-targets-cryptocurrency-users/" target="_blank" rel="noreferrer noopener">Styx Stealer Malware Targets Cryptocurrency Users</a> 
</blockquote>

Malware Targets PostgreSQL Databases for Crypto Mining

The Crypto Times

Other articles published on Aug 22, 2024

Will This be the Biggest Meme Coin ICO of the Summer? Playdoge Presale Concludes in 4 Days

India to release crypto consultation paper by October

What is the New Ethereum Layer-2 Network Corn?

73 Persen Peluang Bitcoin Menguat di Kuartal ke-4

Coinbase To Support Polygon Token Upgrade From MATIC To POL

Goldman Sachs Contradicts Past Skepticism with $418M Bitcoin ETF Investment

Join our free newsletter for daily crypto updates!