For those who don’t know crypto jacking represents the practice of using a computer’s processing power to mine cryptocurrencies without the user’s consent or knowledge.
Recently four South Korean hackers have been arrested in a crypto jacking case involving over 6,000 computers.
The National Police Agency’s cyber bureau said that the four hackers had not been incarcerated, but they certainly would face a trial for infecting 6,038 PCs with malicious mining malware, by sending job application documents sent via email.
A police official stated:
“Security firms quickly responded to the spread of malware, that is why the hackers revenue was not very high. Most of the cases were detected by anti-virus software within 3 ~ 7 days. When it was detected, the hackers sent further malware, but it was soon detected again.”
The case is interesting because all four hackers are young and the because the crypto jacking campaign lasted only for two months between October 2017 and November 2017, making only one million won ($895).
Remember everything can be hacked. In order to stay away from any threats related to the cyber world, we recommend the install of antivirus for Windows or antivirus for Mac on every device that you own, depending on which OS your device is running. If you are a company, it is also recommended to hire every year a specialized cybersecurity company that will run annual tests on your company’s network. These tests include penetration testing and ethical hacking tests;
Beside its particularities, this case is also the first of its kind in South Corea. Investigators are saying that the emails containing the malware were sent as real resumes, resulting in the infection of computers used by human resources (HR) staff, affecting 32,435 people in total.
The mined crypto was the anonym cyber coin Monero (XMR), which is frequently involved in crypto jacking cases that are using a “Coinhive” code.
Coinhive is a legit program created to mine XMR via a web browser.
Compared to other crypto jacking campaigns, the South Korean case is insignificant; for example in July, 20 suspects were arrested in China in a major case that affected over one million computers that generated $2.2 million dollars.
We would continue to monitor this cybersecurity problem. Meanwhile, users should keep a keen eye out for any cyber attacks. Remember to use an antivirus for Windows or antivirus for Mac in every device that you own, depending on which OS your machine is running, If you are a company we recommend to hire every year a specialized cybersecurity company that will run annual tests on your company’s network, tests like this include: penetration testing and ethical hacking.