What is cryware?

Cryware is directly related to cryptocurrencies. Indeed, digital currencies are widely used today as an investment method. However, they are also used to make online purchases. But the truth is that they are targeted by hackers to launch a wide variety of attacks and steal them.

We can say that a Cryware is an information thief related to cryptocurrencies. In fact, they are responsible for collecting user data, such as credentials and passwords. Consequently, they seek to break into accounts or intercept a payment we make. Usually, these attacks result in the theft of all types of cryptocurrencies or fraudulent transfers.

How it works

These types of attacks have grown considerably recently. Especially at the same pace as the use of cryptocurrencies. Hackers know that they have a great opportunity because there are many careless users who buy and sell cryptocurrencies on the Internet. In addition, they often fail to take appropriate measures.

This type of attack has grown considerably recently. We could say that at the same rate as the use of cryptocurrencies. Hackers know that they have a great opportunity, as there are many careless users who buy and sell cryptocurrencies on the Internet. And that, in addition, in many occasions they do not take the appropriate measures. This is an irreversible attack. That is, once the cryptocurrencies have been stolen, there is no way to reverse the situation. Those digital currencies are lost to us, as they are automatic transactions. In effect, there is no way of knowing where it is going or who is going to receive them.

But Cryware is not just about stealing cryptocurrencies. In fact, they can also use your system resources to mine digital currencies without you even realizing it. This is what is also known as cryptocurrency miners. They will use the power of a computer, for example, to mine cryptocurrencies in a hidden way.

How they can attack you

You may wonder how they can attack you with this type of threat. In fact, they can use different methods to do so. Basically, they will act as with other similar security threats that you can find on the web. The goal will be to control your cryptocurrencies, or even go as far as to mine them.

A very common technique is to use keyloggers. That is, a type of malware that is responsible for collecting the keystrokes that we put on the computer or cell phone. This also includes passwords. Consequently, they will find out what is the key to access an account where we store cryptocurrencies. Or even to a program from which we send or receive cryptocurrencies such as Bitcoins, Ethereums or whatever.

They can also use the impersonation technique. That is, they will create a web page identical to the legitimate one. However, in reality it is a scam. This is a phishing attack, like many others on the Web. All you have to do is log on to these sites and enter your data. As a result, they will end up on a server controlled by hackers.

Another type of strategy they use is to sneak in malicious software as if it were an official program. For example, a supposed application for sending and receiving cryptocurrencies that pretends to belong to a popular service. But in reality it has nothing to do with it.

What to do to avoid it

Therefore, as you have seen, Cryware is a threat that will put your cryptocurrencies at risk. It can attack you in different ways. Therefore, it is essential to be protected and not to make mistakes. We are going to give a series of recommendations to avoid problems and always maintain security.

Common sense

The first and most important thing is not to make mistakes. Common sense is essential to be protected against scams and threats of all kinds. Usually, hackers will need us to do something wrong. For example, such as clicking on a fake link, downloading something malicious, etc. If you avoid making common mistakes of this type, you stand a good chance of being protected from Cryware. As well as other similar threats that can put your cryptocurrencies or systems in general at risk.

Use security software

Another important point is to have a good antivirus installed. Having security applications will help us to detect threats that may reach our computers. It can warn us if accidentally we have downloaded a file that can be a Cryware or any other variety of malware. You will find many programs available that can help you. Some examples are Windows Defender, Bitdefender, or Avast. You will certainly have both free and paid options. However, you must choose one that works well, with good reviews on the Internet.

Install official software

Of course, one thing you can’t miss is to install the programs from official sources. You can go directly to the website of that application and download it from there. You can also use reliable application stores, such as Google Play. This way, you will avoid installing software that may have been modified maliciously.

Use physical wallets

You can also consider the option of having physical wallets. Basically, it is a physical device where you will store your cryptocurrencies. This way you will have them protected at all times. The only way you will have problems is if you lose that device or for some reason it breaks down.

Unlike having cryptocurrencies in online applications, in this case they will not be so exposed to possible vulnerabilities. Especially to intruders who can steal your passwords and enter your accounts.

Keeping everything up to date

To achieve good security, another important factor is to always keep everything updated. This should be applied to the cryptocurrency programs you use, as well as to the browser or operating system. In short, any software that can be exploited by an attacker. In the case of Windows, to update it you have to go to Start, go to Settings and access Windows Update. There you will see possible pending updates, and they will be installed automatically. This is something that you should check periodically to always have the latest versions.

In short, as you have seen, Cryware is a security problem that affects cryptocurrencies. They can steal from you in different ways, as well as even use your devices to mine cryptocurrencies. However, you can consider the tips we have given to improve security and protection. Bye!

The post How cryware works and how to avoid it. appeared first on Linux Windows and android Tutorials.

Unfortunately, in most cases, the hackers use others’ hardware for making money for themselves. Recently, security researchers discovered a massive cryptojacking campaign that targets and infects MikroTik routers with a copy of the Coinhive in-browser mining script. As you can tell, Coinhive mining script is one of the most popular in-browser mining scripts of all times.

The campaign appears to have started this week and at the first stage, was mainly active in Brazil. However, as its next target, it started infecting MikroTik routers all over the world.

A Brazilian researcher (@MalwareHunterBR) identified the attacks first. The attack continued growing infecting more and more routers and got the attention of Simon Kenin – a security researcher from Trustwave’s SpiderLabs division.

another mass exploitation against @mikrotik_com devices (https://t.co/4MxQbnNStA)
hxxp://170.79.26.28/
CoinHive.Anonymous(‘hsFAjjijTyibpVjCmfJzlfWH3hFqWVT3’, #coinhive pic.twitter.com/Nr8MA0TbzY

— MalwareHunterBR (@MalwareHunterBR) July 30, 2018

Numbers of infected routers

In a report from Trustwave, Kenin mentioned that the hacker(s) behind the campaign successfully compromised at least 72,000 MikroTik routers at the first stage of attack in Brazil.

But at the second stage, it attacked and infected more and the total number rose up to 170,000.

Update: Using a different Coinhive key, a new campaign of similar type was ongoing. It’s not sure whether the attacker is the same or another one. In total, the number is about 200,000 of infected routers.

Infection method

Kenin also said that the hacker(s) take the advantage of a zero-day vulnerability in the Winbox component of MikroTik routers. This vulnerability was first discovered back in April this year and MikroTik fixed the problem within 24 hours. However, this doesn’t mean that all the owners of the routers took the necessary steps to apply the required patch.

The zero-day was dissected by a number of security researchers and in GitHub, there are public proof-of-concept codes available. Check out proof-of-concept 1 and 2.

According to Kenin, the attacker(s) took the advantage of the public codes for altering traffic passing through the router and inject a copy of Coinhive library inside all the pages that passed through the router.

It’s only one threat actor, according to what information was found about the attacking. All the script shared the same Coinhive key.

Other users infected

Kenin says that he was able to identify where some non-MikroTik users were also impacted. It happened because some Brazilian ISPs were using MikroTik as their main network and thus, the attacker(s) successfully injected malicious Coinhive mining script in a massive amount of web traffic.

The attacker is also smart enough to decrease the surface of the attack. If users would get a lot of trouble visiting sites, both the ISPs and users would perform investigation on what’s going on. Recently, the attacker(s) switched tactics and only injecting the scripts in error pages returned by routers.

This doesn’t have a downfall for the attacker as it seems. Kenin said that in recent days, he noticed the attack spreading all over the world and infected nearly as much as 170,000 MikroTik routers.

Thus, even if the attacking surface is only limited to error pages, there are potentially millions of daily pages for the attacker.

How to stay safe

If you own a MikroTik router, it’s a must that you have to upgrade your router’s firmware. Don’t forget to apply all the available patches as well.

It’s also recommended to reset the router to system default beforehand so that it will remove any possible malicious code present in the system.

The post Cryptojacking Campaign Infected 170,000 MikroTik Routers appeared first on Linux Windows and android Tutorials.

The exchanged informed everyone about the hack via a message on its website where Coinrail admitted that a hacker was able to steal tokens that were issued during the ICOs of Pundi X (NPXS), Aston (ATX) and NPER (NPER) that were on trade at the time on its server.

Work in progress for freezing stolen funds

As soon as the intrusion was detected, the exchange put the portal in maintenance mode. The exchange confirmed that it secured and moved almost all of its cryptocurrency assets in cold storage wallets (offline).

Conrail is working with the affected ICO companies on the investigation of the hack. Some accounts that were about to receive the stolen funds were also frozen by other cryptocurrency exchanges.

Estimated stolen fund ranges from $30 million to $40 million

The exchange didn’t reveal any information on the amount of the total funds stolen. However, a prominent Bitcoin forum tracked down the attacker’s alleged addresses and believes that the total stolen fund was worth $30 million to $40 million – along with nearly 50% of the NPXS tokens.

According to Coinrail and the investigating companies, the hacker also stole ICO tokens from other projects like Tron (TRN) and Dent (DENT).

At present, due to heavy pressure from the authorities, cryptocurrency exchanges offer compensation plans for users. However, Coinrail didn’t publish any information regarding any type of compensation plans.

The post Coinrail – Cryptocurrency Exchange Hacked appeared first on Linux Windows and android Tutorials.

Cryptojacking has turned into the hottest malware trend of the recent days. Hackers don’t need to break into your bank account. Instead, they can simply use your PC to make money. You pay for the energy consumption and hackers get their money free of charge. After emerging, lots of security software (antivirus, ad blockers, browser extensions etc.) are now able to detect and block cryptojacking scripts. The miner was previously loaded as JavaScript codes associated with cryptojacking servers.

Hackers now have found ways to work around the blocking and mine freely. Using proxy servers, crooks are now able to inject the mining code into your browser.

Proxy servers helping to evade detection

The most widespread and popular method of such workaround is deploying a “cryptojacking proxy server”. There’s an example available on GitHub, named CoinHive Stratum Mining Proxy.

These proxies allow the hackers to host the mining codes on their server (instead of CoinHive, DeepMiner, CryptoLoot servers) and load them as an anonymous JavaScript code. As you guessed, these servers are blocked by security programs by default.

Secondly, the proxies let the hackers to utilize a custom mining pool, featuring to detach the mining process from the parent cryptojacking service. For example, this ability ensures no fee payment to CoinHive.

Due to all these facilities, hackers are currently tending to use them as a defensive layer for their miners. Two security vendor company – Malwarebytes and Sucuri – have been tracking such attacks in the recent months.

The only way to identify the illegal mining is to check your system’s performance. If the CPU or GPU usage is pretty high, that means that a cryptojacking process is running. You can use Task Manager (on Windows) or System Monitor (on Linux) or any similar programs to check out the CPU usage regularly for any suspicious activity.

Hackers currently succeeded in earning $75,000 from a new campaign discovered recently. Learn more about how hackers earned the money using a 5-years-old exploit.

The post Improved Methods for Avoiding In-browser Miner Detection appeared first on Linux Windows and android Tutorials.

What is cryptocurrency mining

Before you understand how serious this issue is, you have to realize how cryptocurrency works. Let’s start with Bitcoin, the most popular cryptocurrency of all. The total possible number of available Bitcoin is 21 million – nothing more. But not all the coins currently exist – they have to be mined by solving different math puzzles with the help of computers. This method requires a huge hardware resource to calculate and solve all the puzzles. The solver gets Bitcoin as a reward. Mining requires an algorithm and a computer to run the algorithm.

Websites now use your web browser to run that algorithm and your hardware to perform the heavy job. This process is called “cryptojacking”. Many websites are using this method to earn some extra money. The perfect example is CoinHive. It uses a JavaScript tool to mine on your browser.

Cryptojacking

Why is cryptojacking bad? Well, it’s a controversial topic. Some think it’s okay, some think it’s bad. However, it’s a bad trait overall. Normally, cryptocurrency mining methods are HEAVILY resource-hungry. It forces your processor to work on overload and using more power. This overload work is dangerous for hardware like CPU – the more work, the more heat generation that gradually leads to permanent damage. Moreover, when browsing the website, your other works will become very slow as your CPU is busy in mining.

There are different websites that use such mining tool on their website. For example, The Pirate Bay (caution – it’s a torrent website with illegal content) is a torrent site. They integrated the CoinHive JavaScript to run in the web browsers of its viewers. They claim that it’s their alternative method to earn some extra money instead of showing the annoying ads. It’s the first popular website that took this measure.

Why would you burn your PC? There’s no need for such an overload on your computer. Cryptocurrency mining is so resource-hungry that there are numerous different mining hardware available that are specially designed for mining. PC is never a suitable solution for mining.

How to stay secured

By far, CoinHive is the most popular miner that websites use. However, other mining tools are always floating in websites. For blocking such heinous tools, you can use several methods.

• Install Adblock – It’s one of the most popular extensions for all the browsers. There’s a default cryptocurrency blocking method available. The extension is available for Chrome, Firefox, Opera, Safari, and Edge. Get Adblock.
• Use a security solution – Security vendors are always checking the web for cyber issues. By default, a security software will block the mining tool from the web. CoinHive successfully fooled a few security software, but all the companies are always evolving to defend the latest threats. Check out the top 10 security solutions.
• Block CoinHive – CoinHive is the most popular one in such actions. The file that is used can be blocked using custom filters. Block “coin-hive.com/lib/coinhive.min.js” using Adblock Plus.

The bottom line

Fortunately, the tool doesn’t steal sensitive info. Recently, other malicious miner tools are affecting PCs. Zealot is one of them. Learn more how to stay protected from Zealot.

The post How to Stop Hackers from Mining Cryptocurrency on Your PC appeared first on Linux Windows and android Tutorials.

What is NiceHash?

NiceHash is a company that allows users to buy “hashing power” – computers to mine more and more Bitcoin and other cryptocurrencies. If you don’t know what mining is, it’s the process of verifying Bitcoin transactions and adding to the public ledger. This process also adds more Bitcoin to the system. From the profit, users get rewards Bitcoin added to their account.

The effect of the incident

This incident has divided the NiceHash cryptocurrency community into 2 groups – one blaming the company for their competence and another deciding to stick with NiceHash. According to Will M. by the Reddit username bitbug42, had about 1.2 BTC (~ $20,000) on his account. He said, “It’s like if a human forgot to close the vault’s door, I blame the human error, not the lock machinery”.

The attack was highly professional with sophisticated social engineering, confirmed by NiceHash. NiceHash is investigating the situation and will release updates accordingly. Reddit users noted on a specific wallet that contains more than $60m on its account and most people suspects the account as the thief. The account is publicly available to view.

Another major incident that took place is a flaw in the Parity Technologies wallet system. A novice hacker accidentally (intentionally, maybe?) deleted a library from the code that was necessary to access the money stored in the digital wallet. Due to the situation, a good number of accounts got frozen, having around $150 million in the account. To unfreeze the account, work is still in progress. Specialists are suggesting a hard fork for the ledger. This would restore the ledger with the previous code, the only possible way now for unfreezing the account.

This is only some of the major attacks upcoming in the future. As Bitcoin is the most successful cryptocurrency and its price is becoming higher and higher, it’s time to take action to protect yourself against any security threat.

Bitcoin is a cryptocurrency, meaning that it isn’t literally possible to hack and transfer all the money. Instead, hacking the clients’ devices is a lot easier, with the newest discoveries of unforgivable security holes in systems.

What to do now

1. Use a unique email to your digital wallet for cryptocurrency exchange.

2. Assign a really strong & long password that none can access. Longer passwords will take more time for hackers to break down.

3. Enable maximum protection in your mobile device. It’s better not to use text messages as a 2-factor authentication.

4. Try to buy cryptocurrencies across multiple exchanges.

5. Keep your cryptocurrency offline. For example, you can buy a hardware wallet that’s designed specifically for creating transactions.

6. For exchanging Etherium, try to look into decentralized exchanges.

Above all, stay alert of any type of suspicious activities. Cryptocurrencies, for their limited supply, is highly valuable and the value is increasing day by day. The value is highly volatile as well, meaning that it fluctuates a lot. In order to secure your money, keep your devices and yourself secured and that’s the only way now.

The post Bitcoin & Cryptocurrencies under Attack from Hackers – Stay Safe appeared first on Linux Windows and android Tutorials.

Kodak, according to its original purpose, it’s a company that produces imaging products with its historic basis on photography. Kodak’s main business segments include enterprise inkjet systems, micro 3D printing, and packaging, print systems etc. Kodak is best known for their top class photographic film products. They’re also going to have a new service – cryptocurrency.

Why Bitcoin is popular

Bitcoin is, by far, the most popular cryptocurrency. Its popularity is so far and wide that Bitcoin itself is the alternative of cryptocurrency. The value of every Bitcoin has been steadily rising upwards.

More and more people are using Bitcoin. Its technical details are a bit complex, so here’s the summary. Bitcoin is available up to a fixed number. It’s because the system allows more Bitcoins only by mining. At the current system, on 21 million Bitcoins can be present – no more. However, people using more and more Bitcoins is expected to increase its value, and that’s what we’re seeing. Check out the latest price of Bitcoin.

Bitcoin supply is limited and its price is really good. By far, it’s the most successful cryptocurrency. There’re others like Ethereum, Ripple, NEM, Cardano etc.

Why moving towards cryptocurrency

It’s really interesting that company like Kodak is releasing its own cryptocurrency now. The reason? It’s the success of Bitcoin, according to major speculations. It’s not so surprising that another company simply jumped into the world of cryptocurrency.

The ground is still holding towards photographers, though. Kodak is intending to popularize their new cryptocurrency, named KodakCoin, to be available for photographers.

Kodak is going to launch its own blockchain tech with KodakCoin and KodakOne. A short note – blockchain is a ledger system that keeps the record of all the transactions of all the digital currencies.

Photographers will be able to register their works under Kodak and license under their agreements. Kodak will provide payment to them via the KodakCoin. According to CEO Jeff Clarke, this KodakCoin will help the photographers to get the surety of secured and trusted income. He also added that this step will allow photographers to take control over their hard works and maintain a control over the system. This would create a new economy for the photographers for receiving and selling work on a secure platform.

Kodak’s share, KODK, has already seen the effect of this step. Currently, the price of the share has gone skyrocket. According to the current time, it’s seen a rise of 57.35%, growing the price up to $10.70.

The initial KodakCoin will be available to the customers on January 31st, 2018.

Things to keep in mind

KodakCoin is just entering the marketplace. It’s also awaiting potential investors to establish a strong fund. However, there are several concerns that you need to keep in mind before jumping towards KodakCoin and ultimately, every cryptocurrency.

• There’s no rules and regulations how these virtual currencies work. The nature of the transactions also makes it difficult to trace.
• The value of any cryptocurrency is highly volatile. For example, Bitcoin saw a fluctuation of its price up to $2,000 within a couple hours.
• The investors are one of the prime targets of hackers and other criminals for stealing their crypto-cash online.

The dark side of Kodak

KodakCoin is a pretty surprising. However, there are more controversies about this new project.

First of all, there’s always a possibility of a bubble in any cryptocurrency. This is a possibility when the price of a cryptocurrency rises way up than expected. People will start collecting money, and all of a sudden, the prices go down. As there’s no rules & regulations for cryptocurrencies, it’s pretty possible.

KodakCoin’s another dark factor is RYDE coin. It’s strongly suspected that KodakCoin is the re-branding of an initial coin called RYDE coin. It didn’t get much popularity and shutted down just before a few days before Kodak announced their KodakCoin. RYDE coin was initially created by WENN Media, a paparazzi photo company.

RYDE crowdfunding project was led by Jan Denecke as the SEO. Now, KodakOne will have him as the SEO of the project. Fortunately, Google managed to take a cache of the WENN website. It says that RYDE coin is coming back in 2018.

Another suspicious thing is the Kodak KashMiner. It’s a Bitcoin miner, according to Kodak. Spotlite, the company who’s licensing Kodak for this business, will split the profit into 50-50. One of the basic tenets of Bitcoin miners is that it becomes more and more difficult. The initial investment requires $3,400. The company says that over the next 2 years, you’ll be able to earn $9,000 total! The price of Bitcoin is highly volatile and due to the increased difficulty of Bitcoin mining, there’s no guarantee that it’ll  be enough to cover up all the costs. According to a Bitcoin specialist, the final outcome could only be $2,457.

You must stay highly alert to these side effects.

The bottom line

It’s the nature of cryptocurrencies to become more and more valuable. The success of Kodak’s KodakCoin will depend on the level of investment, the level of “reserves” of the coin and the release rate. With the rise of KodakCoin, it’s a matter of time to find out its worth – whether it’ll compete with Bitcoin or be just another common cryptocurrency. Be cautious and stay put if you’re willing to get a part of KodakCoin.

The post KodakCoin – The Latest Cryptocurrency Convert appeared first on Linux Windows and android Tutorials.