Palo Alto Networks

Cryptocurrency

‘BabyShark’ Targets Cryptocurrency Industry

Palo Alto Networks has discovered that the threat actor behind the BabyShark malware family has expanded its operations beyond conducting espionage to also targeting the cryptocurrency industry.

The company’s threat research team, Unit 42, discovered decoy documents related to xCryptoCrash, an online gambling game, that show the attackers are ...

Threat Research

Apr 26, 2019

By Unit 42

Palo Alto Networks

Products and Services

Partners

Unit 42

Cyberthreats in 2019: The Trends That Will Continue to Move Upward

When it comes to realistic predictions for the year ahead, my philosophy is simple: there are certain trends that research shows will continue to move upward. With that said, in 20...

Dec 12, 2018

By Ryan Olson

Unit 42

New Wine in Old Bottle: New Azorult Variant Found in FindMyName Campaign us...

Observed in the wild as early as 2016, Azorult is a Trojan family which has been delivered in malicious macro-based documents via spam campaigns, or as a secondary payload in the R...

Nov 21, 2018

By Tao Yan, Xingyu Jin, Bo Qu and Zhanglin He

CSO Perspective, Points of View

What’s on Our Minds for 2019? Key Themes from the RSA Speaker Selection Pro...

Like many of my peers, at the end of each year, I get asked to give my perspective as to what may happen in the coming year. Ironically, I’ve just com...

Nov 13, 2018

By Greg Day

Cybersecurity

Understanding Illicit Cryptocurrency Mining: Threats and Best Practices for...

Anything that has significant monetary value eventually attracts criminal activity. Such is the case with cryptocurrency, which since its earliest days has played a role in everyth...

Sep 19, 2018

By Ryan Olson

Unit 42

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux an...

Unit 42 researchers have found a new malware family that is targeting Linux and Microsoft Windows servers. We can tie this malware, which we have named Xbash, to the Iron Group, a...

Sep 17, 2018

By Claud Xiao, Cong Zheng and Xingyu Jin

Products and Services, Secure the Enterprise, Service Providers

Malicious Cryptocurrency Mining Digs Into Mobile

Malicious cryptocurrency mining is a fast-growing threat in 2018, surpassing ransomware as the favorite choice of cybercriminals. The rising value and steady availability of digita...

Sep 12, 2018

By Terry Young

News of the Week

News of the Week: June 16, 2018

Did you miss any of this week’s Palo Alto Networks action? Don’t worry – we’ve rounded up our top news and views right here:

Jun 16, 2018

By Justin Hall

Unit 42

The Rise of the Cryptocurrency Miners

Over the past few months, I’ve found myself continually being in the position of researching a new threat or campaign that results in the delivery of a cryptocurrency miner. As time progressed, I began asking myself if this was a coincidence, or part of a much larger tr...

Jun 11, 2018

By Josh Grunzweig

Threat Brief, Unit 42

Threat Brief: What’s Driving the Shift to Cryptocurrency Mining Malware?

Over the past six months, we’ve seen a major increase in the number of attack campaigns with the ultimate goal of mining cryptocurrency. It’s a subject Unit 42 has been tracking in...

Mar 06, 2018

By Ryan Olson

Unit 42

Sure, I’ll take that! New ComboJack Malware Alters Clipboards to Steal Cryp...

Unit 42 researchers have discovered a new currency stealer which targets cryptocurrencies and online wallets. "CryptoJack" functions by replacing clipboard addresses with an attack...

Mar 05, 2018

By Brandon Levene and Josh Grunzweig

Unit 42

Monero Miners Continue to Plague Users via Russian BitTorrent Site

As 2018 begins, we’ve witnessed an increased trend in cryptocurrency miners. The latest identified threat comes in the form of a Russian BitTorrent site that is covertly distributi...

Mar 01, 2018

By Josh Grunzweig

Threat Brief, Unit 42

Threat Brief: A Declining Rig Exploit Kit Hops on the Coinmining Bandwagon

In January 2017, Rig Exploit Kit (EK) was still in the middle of a strong run. But when April 2017 came, Rig started a very marked decline.

Feb 26, 2018

By Christopher Budd

Threat Brief

Threat Brief: Malware Authors Mine Monero Across the Globe in a Big Way

In October 2017, Palo Alto Networks Unit 42 published research showing how attackers were adapting attack techniques to generate cryptocurrency for themselves. In that research, we...

Jan 24, 2018

By Christopher Budd

Unit 42

Large Scale Monero Cryptocurrency Mining Operation using XMRig

Based on publicly available telemetry data via bitly, we are able to estimate that the number of victims affected by this operation is roughly around 15 million people worldwide. T...

Jan 24, 2018

By Josh Grunzweig

Predictions, Retail

2018 Predictions & Recommendations: What Retailers Should be Thinking ...

This post is part of an ongoing blog series examining predictions and recommendations for cybersecurity in 2018.

Dec 19, 2017

By Christopher Budd

Threat Brief

2 Minute Threat Brief: Browser Cryptocurrency Mining

Cybercriminals have embraced the anonymous nature of cryptocurrency as a new preferred method of profit. Unit 42 released details about attackers hijacking web browsers to mine for compute resources and exchang...

Oct 20, 2017

By Eila Shargh

Threat Brief

Threat Brief: Drive-by Mining - Adapting an Old Attack to Mine Cryptocurren...

On January 2, 2017, one Bitcoin was worth US $985.56.By October 16, 2017, that same Bitcoin was worth US $ 5,707.40: a 579% increase in value in ten and a half months.

Oct 17, 2017

By Christopher Budd

Unit 42

Unauthorized Coin Mining in the Browser

Cryptocurrencies have taken the world by storm. From the biggest player Bitcoin to newcomers such as Monero and Ethereum, cryptocurrency mining has become a hot industry due in part to powerful, dedicated minin...

Oct 17, 2017

By Wayne Xin, Yuchen Zhou, Wei Xu and Jun Wang

Load more blogs