SHA1:
- 1bb5413ca978224892f03a315ff6967aeb70a431 (loader)
- 4392de0b4ba80b52136fa2dfc5ff1b554d9481c4 (miner)
Miner Trojan for Linux OS is designed to mine the Monero (XMR) cryptocurrency. There are versions for x86-64 and ARM architectures.
To distribute the Trojan, attackers guess login and password to access the target device using the Telnet protocol, install the loader on the device and launch it with a terminal command. The loader downloads the miner from the control server and install it on the attacked device.
In the loader source code, krebsonsecurity.com is mentioned several times:
