Newsletters
News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Get Recognized.
Let an ISACA® certification
enhance your career.

Register for an Exam Today
Data Security
Tame your scariest paperwork. Find Out How
Average Rating:
Rate this article:  
Skype Messages Link to Malware, Make  PCs Bitcoin Slaves
Skype Messages Link to Malware, Make PCs Bitcoin Slaves

By Jennifer LeClaire
April 5, 2013 2:34PM

    Bookmark and Share
"I think some people overthink the motivation and actions of 'bad guys,' " said security expert Alex Horan. "Yes, there are absolutely skilled people doing this type of activity explicitly on behalf of their nation or government....But there are a lot more people just out there to make a buck." The latest is targeting Skype with malware to turn PCs into slave Bitcoin generators.
 



Skype users beware. Malware is targeting your favorite messaging app. Kaspersky is sounding the alarm this week with back-to-back posts about malicious campaigns on Skype.

One is a campaign that presents a malicious URL. The other uses its victim's machine to mine Bitcoins. Both are serious, but the second attack is getting major media attention.

Dmitry Bestuzhev, a Kaspersky Lab expert, on Thursday pointed out an infection vector via social engineering that's abusing infected Skype accounts by massively sending messages to contacts, with a link to a photo and the sentence, "I don't think I will ever sleep again after seeing this photo."

A Slave to Bitcoin

"Goo.gl short URL service shows that at the moment there are more than 170k clicks on the malicious URL and only 1 hour ago there were around 160k clicks," Bestuzhev said. "It means the campaign is quite active with around 10k clicks per hour or with 2.7 clicks per second!"

But most of the victims are from Russia and the Ukraine so far. Hours later, Bestuzhev turned his focus to the Bitcoin malware that's trending in Google News. He said it's a similar campaign in terms of propagation but different in terms of origins and purposes. Average clicking is also high, with more than 2,000 clicks per hour. Most of the potential victims live in Italy, followed by Russia, Poland, Costa Rica, Spain, Germany and Ukraine.

"Once the machine is infected it drops to the system many other pieces of malware. Downloads come from the Hotfile.com service. At the same time the malware connects to its C2 server located in Germany," Bestuzhev wrote in a blog post. "So what does malware do? To be honest many things but one of the most interesting is it turns the infected machine to a slave of the Bitcoin generator. The usage of CPU grows up significantly."

Cyber Economics

Alex Horan, a senior product manager at Core Security, said this is simple economics: How much does it cost to rent a large group of machines from a botnet herder? And how much money can I make in that period of time via Bitcoin? If the amount of money to be made is higher than the money to be spent, he said, then you are in business.

"I think some people overthink the motivation and actions of 'bad guys.' Yes, there are absolutely skilled people doing this type of activity explicitly on behalf of their nation or government -- or without explicit instructions, but with patriotic zeal," Horan told us. "But there are a lot more people just out there to make a buck. And if the scam du jour is Bitcoin harvesting via compromised machines then you can expect to see a lot of people -- of varying skill levels -- trying this out."

So how do you stop this? Horan said you can stop Bitcoin the same way you stop most other crimes -- stop it from being profitable.

"If paper money was so simple that you could not tell the difference between a photocopied note and a real one, a lot more people would be photocopying money," he said. "But creating passable counterfeit money requires a significant investment. Bitcoin needs to create some kind of equivalent, some way to distinguish between the actions of a machine that is being enslaved into work vs. those machines that have actively chosen to participate."
 

Tell Us What You Think
Comment:

Name:



Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.


 Data Security
1.   Juniper DDoS for High-IQ Networks
2.   Google Hacker Team to Hunt Bugs
3.   Cloud Firms Offer Azure Starter Kit
4.   FBI Cyber-Expert's Humble Start
5.   Chinese Hackers Hit U.S. Officials


advertisement
Gartner Rates IT Security Companies
IBM, HP, McAfee, Splunk ranked well.
Average Rating:
Hackers Target Western Energy Firms
Appears to be state-sponsored group.
Average Rating:
IBM Uncovers Android Security Flaw
Ten percent of devices at risk.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
34 European Banks Hit by Android-Skirting Malware
Criminals have been finding gaping holes in Android-based two-factor authentication systems that banks around the world are using. The result: 34 banks in four European countries have been hit.
 
New Web Tracking Technologies Defeat Privacy Protections
Recently developed Web tracking tools are able to circumvent even the best privacy defenses, according to a new study by researchers at Princeton and the University of Leuven in Belgium.
 
Juniper DDoS Solution Aims at High-IQ Networks
In the face of more complex attacks, Juniper Networks is boosting its DDoS Secure solution to help companies mitigate the threats with more effective security intelligence throughout the network fabric.
 

Enterprise Hardware Spotlight
Contrary to Report, Lenovo's Staying in Small Windows Tablets
Device maker Lenovo has clarified a report that indicated it is getting out of the small Windows tablet business -- as in the ThinkPad 8 and the 8-inch Miix 2. But the firm said it is not exiting that market.
 
Seagate Unveils Networked Drives for Small Businesses
Seagate is out with five new networked attached storage products aimed at small businesses. The drives are for companies with up to 50 workers, and range in capacity from two to 20 terabytes.
 
Another Day, Another Internet of Things Consortium Is Born
In the emerging Internet of Things, zillions of devices will be talking to each other. Samsung, Intel and Dell just formed a consortium to ensure each thing can understand what others are saying.
 

Mobile Technology Spotlight
Apple Patent for Smart Watch Comes to Light
Does a new smart watch patent issued to Apple provide a preview of the expected wearable from the tech giant? Some Apple-watchers are parsing the patent for signs of the coming product.
 
Will iPhone 6 Cannibalize Apple's Tablet Sales?
Could Apple’s iPhone 6 -- it’s so-called super-size phone due to hit store shelves this fall -- come back to haunt the smartphone maker? Some observers say yes; others say preposterous.
 
Axed Nokia X Phones Suffered from Lack of Identity
So long, Nokia X, we hardly knew you. The Nokia X phones Microsoft discontinued blend two rival operating systems, but leave out the best of each. As a result, the devices didn't become a runaway hit.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | Data Storage | Small Business | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech
Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.