HeadCrab: The Stealthy Malware Infiltrating Redis Servers for Cryptomining

Reading Time: 3 Minutes

HeadCrab mining Monero through Redis servers

A new malware called HeadCrab has been discovered by Aqua Security researchers that is specifically designed to target vulnerable Redis servers online to mine Monero cryptocurrency.

The malware has infected over a thousand servers since September 2021 and has built a botnet that is undetectable by traditional anti-virus solutions. Redis servers are designed to be used within an organization’s network, and if they are not secured, attackers can easily compromise and hijack them.

HeadCrab malware (Aqua Security)

Cryptomining botnet

The HeadCrab malware provides the attackers with complete control over the targeted server and enables them to add it to their cryptomining botnet.

The malware runs in memory on compromised devices, deletes all logs, and communicates only with other servers controlled by the attackers to evade detection.
The attackers are estimated to be earning an annual profit of around $4,500 per worker, which is much higher than the average earnings of similar operations.

Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?

If you want to express your idea in an article contact us here for a quote: [email protected]

Source: bleepingcomputer.com

Source Link