3 ms·
To be clear, as far as I can tell, the ransomware is built using nodejs. It is not a ransomware that's installed via a compromised package. Although if you happ
by asdfasgasdgasdg 7y ago
To be clear, as far as I can tell, the ransomware is built using nodejs. It is not a ransomware that's installed via a compromised package. Although if you happen to be a bad guy, it seems like building a quality bitcoin-related package, waiting until you have a big installed base, and then owning all your users, might be an effective way to set yourself up for life.
- carlmr 7y agoI thought Bitcoin can't effectively be mined on CPUs anymore, only some AltCoins that are too difficult to compute with ASICs
- Wowfunhappy 7y agoWell, yes, but "effective" is context-dependent. If you have a million computers mining for you, and you're not paying their electricity, it doesn't really matter how individually efficient they are.
- asdfasgasdgasdg 7y agoI'm not talking about a miner. I'm talking about a wallet or some utility module. You'd wait until you have a big installed base then change your module to silently steal coinbase credentials. Wait a few weeks until you have enough of them and then own all the accounts at once. Something like that. The Bitcoin aspect of the module is just to target effectively.
- weare138 7y ago>as far as I can tell,the ransomware is built using nodejs Oddly enough, that's what it is. It even drops a full 17MB copy of nodejs to run it and just renames the executable.
- aussieguy1234 7y agoNode processes can also be renamed on the fly, process.name