Hackers mint digital currency with virus

A computer virus that manufactures digital currency bears similarities to previous North Korea-linked hacking attempts, according to experts.

A computer virus that exploits the same vulnerability as the global "ransomware" attack has latched on to more than 200,000 computers and begun manufacturing digital currency, experts say.

The development adds to the dangers exposed by the WannaCry ransomware, providing another piece of evidence a North Korea-linked hacking group may be behind the attacks.

WannaCry, developed in part with hacking techniques that were either stolen or leaked from the US National Security Agency, has infected more than 300,000 computers since Friday, locking up their data and demanding a ransom payment to release it.

The related attack, which installs a currency "miner" that generates digital cash, began infecting machines in late April or early May but had not been previously discovered because it allows computers to operate while creating the digital cash in the background, researchers at security firm Proofpoint said.

Proofpoint executive Ryan Kalember said the creators of the virus may have earned more than $US1 million ($A1.3 million), far more than has been generated by the WannaCry attack.

Like WannaCry, the program attacks via a flaw in Microsoft Corp's Windows software.

That hole has been patched in newer versions of Windows, though not all companies and individuals have installed the patches.

Kalember said he believed the similarities in the European case, WannaCry and the miner were "more than coincidence."

"It's a really strong overlap," he said.

"It's not like you see Monero miners all over the world."

North Korea has attracted attention in the WannaCry case for a number of reasons, including the fact that early versions of the WannaCry code used some programming lines previously spotted in attacks by Lazarus Group, a hacking group associated with North Korea.

Security researchers and US intelligence officials have cautioned such evidence is not conclusive and the investigation is in its early stages.

The North Korean mission to the United Nations could not be reached for comment, while the FBI declined to comment.


Share

2 min read

Published

Source: AAP



Share this with family and friends


Get SBS News daily and direct to your Inbox

Sign up now for the latest news from Australia and around the world direct to your inbox.

By subscribing, you agree to SBS’s terms of service and privacy policy including receiving email updates from SBS.

Download our apps
SBS News
SBS Audio
SBS On Demand

Listen to our podcasts
An overview of the day's top stories from SBS News
Interviews and feature reports from SBS News
Your daily ten minute finance and business news wrap with SBS Finance Editor Ricardo Gonçalves.
A daily five minute news wrap for English learners and people with disability
Get the latest with our News podcasts on your favourite podcast apps.

Watch on SBS
SBS World News

SBS World News

Take a global view with Australia's most comprehensive world news service
Watch the latest news videos from Australia and across the world