Bitcoin malware spreads over Skype

By

Computers enslaved to mine bitcoins.

Security researchers have uncovered a new Trojan spreading via Skype that can hijack a computer and force it to mine for Bitcoins.

Bitcoin malware spreads over Skype

According to Russian security firm Kaspersky Lab, Skype users are being tricked into downloading the file after receiving a phishing message reading among other phrases "this is my favourite picture of you".

Victim computers were enslaved into a botnet that mines Bitcoins, the online currency that has been making headlines over recent weeks.

Users can earn Bitcoins by solving complicated mathematical problems using their computer.

The malware uses infected PCs to do just that, hoping to claim Bitcoins for whoever is behind the attack. One characteristic of the malware is that it uses up almost all of the PC's available processing power. It also drops other malware onto the PC, Kaspersky Lab said.

Kaspersky Lab researchers said the attacks seem to be originating in India but the malware then transmits data back to a control centre in Germany. So far the Trojan has mainly infected Skype users in Italy, Russia, Poland, Costa Rica, Spain, Germany and Ukraine.

Dmitry Bestuzhev wrote on Kaspersky's blog that at its height, the malware was getting more than 2,000 clicks per hour, suggesting it was spreading fast.

“It abuses the CPU of the infected machine to mine Bitcoins for the criminal,” Bestuzhev said. “If you see your machine is working hard, using all available CPU resources, you may be infected.”

The value of Bitcoins has been steadily increasing over the last few weeks. It is currently trading at just under $190 per coin on Mt.Gox, the world's largest Bitcoin exchange.

Mt.Gox became a target itself last week when a DDoS attack left it struggling to remain operational. It is thought that whoever was behind the attack was looking to drive down the price of Bitcoin before purchasing as much as they can. They then stop the attack and wait for the value to rise again, at which point they sell.

This article originally appeared at scmagazineuk.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, UK edition
Tags:

Most Read Articles

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Australia's super funds told to assess authentication controls

Australia's super funds told to assess authentication controls

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

The Northern Beaches Women's Shelter hones focus on tech-enabled abuse

The Northern Beaches Women's Shelter hones focus on tech-enabled abuse

Log In

  |  Forgot your password?