'This is a first for us': Attackers uses poem to infect thousands of servers with malware
- A threat actor built malware that reads poems posted on GitHub
- The poems are a secret code for the location of C2 servers
- The servers instruct the malware to deploy cryptojackers and scanners
Somewhere in the trackless wastes of cyberspace, a digital Robert Langdon is decoding an ancient poem to find the location of his masters and receive instructions on his next steps. I might be exaggerating a bit, but this is the gist of a rather bizarre story on cyberattacks and cryptocurrency mining.
Cybersecurity researchers from Lumen’s Black Lotus Labs found a piece of malware that gets the instructions on the location of the C2 server from a poem shared on GitHub.
By looking for specific words and decoding them into numbers, the malware can get an IP address where the C2 server is located and receive instructions on what to do next - Black Lotus calls it “adversarial...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
