toggle

AAPL Stock: 113.29 ( + 0.37 )

Printed from http://www.macnn.com

Synology NAS malware mines $620,000 in DogeCoin for assailant

updated 11:30 am EDT, Thu June 19, 2014

Security researchers find September vulnerability attack to Germany

According to Dell's security researchers, a single piece of software, surrepitiously installed on some Synology network attached storage devices, has mined $620,000 of virtual currency Dogecoin. A combination of a vulnerability discovered in September and users not updating the system software of the appliances enabled the hack to occur, which installed the mining package, forcing the devices to run hot and transfer data slowly due to the load from the miner.

Dell's SecureWorks Counter Threat Unit researcher Pat Litke wrote that "to date, this incident is the single most profitable, illegitimate mining operation. As cryptocurrencies continue to gain momentum, their popularity as a target for various malware will continue to rise."

The flaw, discovered in September, was quickly patched by Synology under the DiskStation Manager OS versions 4.2 and 4.3. The update wasn't forced, and required users to click to install, a step many users did not do, allowing the perpetrator to attack the NAS units.

The CPUMiner package, and the corresponding wallet key that was installed, was traced back to Germany. Examination of the cryptocurrency's transaction chain led to the discovery of the perpetrator being from there, with more than 500 million Dogecoin being harvested from the appropriated appliances.

Synology's February patch prevents the attack, but does not eradicate the malware. Users have devised a solution, which can be found on the Synology support forums.




by MacNN Staff

POST TOOLS:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

Follow us on Facebook

toggle

Most Popular

Advertisement

Recent Reviews

ZTE Spro 2 Smart Projector

Home theaters are becoming more and more accessible these days, but maybe you've been a bit wary about buying a home projector. And h ...

MSI Geforce GTX 970 100ME

When Nvidia announced a new line of video cards in September 2014, many people thought things would continue to be business as usual i ...

Wren V5US Wireless Sound System

If you're a music fanatic, chances are you are, by extension, a bit fanatical about what you listen to your music on. If you're like ...

toggle

Most Commented