Litecoin-mining malware DISCOVERED_BY Int80
Int80 says he discovered Litecoin-mining malware on a social-media platform.
Explicit Confidence 98% · Jack Rhysider EP 78 Details
“he discovered some malware on the platform which would mine Litecoin”
Malware
malware:litecoin_mining_malware
Unnamed malware found on a social-media platform that mined Litecoin and used external staging and command-and-control infrastructure.
Unnamed malware found on a social-media platform that mined Litecoin and used external staging and command-and-control infrastructure.
“he discovered some malware on the platform which would mine Litecoin”
“the malware had stages up on Dropbox”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DISCOVERED_BY | Int80 | Explicit | 78 |
| outgoing | USES | Litecoin | Explicit | 78 |
| outgoing | USES | Dropbox | Explicit | 78 |
| outgoing | USES | Command and control | Explicit | 78 |
| outgoing | USES | VPS | Explicit | 78 |
| incoming | INVOLVES | coordinated malware takedown | Explicit | 78 |
Litecoin-mining malware DISCOVERED_BY Int80
Int80 says he discovered Litecoin-mining malware on a social-media platform.
Explicit Confidence 98% · Jack Rhysider EP 78 Details
“he discovered some malware on the platform which would mine Litecoin”
Litecoin-mining malware USES Litecoin
The malware mined Litecoin and used a Litecoin mining pool.
Explicit Confidence 99% · Int80 EP 78 Details
“I reached out to the Litecoin mining pool”
Litecoin-mining malware USES Dropbox
Int80 says the malware staged files on Dropbox.
Explicit Confidence 99% · Int80 EP 78 Details
“the malware had stages up on Dropbox”
Litecoin-mining malware USES Command and control
Int80 says the malware's command and control was hosted on a VPS.
Explicit Confidence 99% · Int80 EP 78 Details
“the C2 was at some hosting company”
Litecoin-mining malware USES VPS
Int80 says the malware's C2 was on a VPS in a hosting provider's environment.
Explicit Confidence 99% · Int80 EP 78 Details
“this malware has got its C2 on a VPS in your hosting setup”
coordinated malware takedown INVOLVES Litecoin-mining malware
The coordinated takedown stopped the Litecoin-mining malware from operating on the internet.
Explicit Confidence 99% · Int80 EP 78 Details
“We did this coordinated takedown and that Friday at 9:00 AM, the malware ceased to exist on the internet.”