[Drako]

I decided to give the title a little "WARNING" due to the nature of this malware.

The botnet Stantinko is being install on unsuspecting peoples computers. From what I can gather, upon watching a YouTube video infected by Stantinko, a module is then installed on your computer to mine Monero.

The malware is very hard to detect due to the strong obfuscation techniques used in the module.

Fortunately for most people the botnet is mainly prevalent in Russia, Ukraine, Kazakhstan, and Belarus.

Snippets from the article:

"A new report from cybersecurity firm ESET has uncovered that the operators behind the Stantinko botnet have been using YouTube pages and channels to install crypto-jacking malware on visitors' computers."

"The Stantinko botnet, initially discovered in 2017 (though has been operating “covertly” since 2012), has reportedly infected more than half-a-million devices around the world, and targets users primarily in Russia, Kazakhstan, Belarus, and the Ukraine. According to ESET, the operators of the botnet are now using YouTube to distribute a crypto-mining module that mines the privacy coin Monero."

Article:

https://decrypt.co/12487/massive-botnet-...tocurrency

[hacxx]

Isn't mining monero dead? I read somewhere else that cryptonight is been discontinued and major pools are advising to mine UPX (not the exe packer).

[Oni]

I've always wondered how much malware-miners make, considering the scale of how many people are infected.

[taylostolo]

Sounds interesting I want the SC!

[taylostolo]

well that was fast have fun https://github.com/eset/malware-ioc/tree.../stantinko

[msch0ft]

I need to look into the source code asap, how do you even infect people through youtube?! That sounds crazy interesting.

I've always wondered how much malware-miners make, considering the scale of how many people are infected.

Love your new profile picture btw

[Oni]

I need to look into the source code asap, how do you even infect people through youtube?! That sounds crazy interesting.

I've always wondered how much malware-miners make, considering the scale of how many people are infected.

Love your new profile picture btw

Spoiler:

NP2'd and grailed.

[refa]

Very interesting news. I wonder where the botnet will attack next.