Varonis published a report about Norman on 14 August 2019, which shows the malware as one of many cryptojacking viruses deployed in an attack that infected machines at a mid-size company. Hackers and cybercriminals deploy cryptojacking hardware to use the computing power of unsuspecting users’ machines to mine cryptocurrencies like the privacy oriented coin Monero.
Norman in particular is a crypto miner based on XMRig – a high-performance miner for Monero cryptocurrency. One feature that Norman has is that it will close the crypto mining process in response to a user opening up Task Manager, and after Task Manager closes, Norman uses a process to relaunch the miner. Moreover, the researchers conjectured that Norman comes from a French-speaking country, due to the presence of French variables and functions within the virus’ code.
Similarly, another cybersecurity company, Carbon Black, uncovered an unsettling update to a strain of XMR mining malware. The company discovered that a type of malware called Smominru is stealing user data alongside its mining operations. Carbon Black believes that the stolen data may be sold by hackers on the dark web.
Every day we send out a free e-mail with the most important headlines of the last 24 hours.
Subscribe now
We welcome comments that add value to the discussion. We attempt to block comments that use offensive language or appear to be spam, and our editors frequently review the comments to ensure they are appropriate. If you see a comment that you believe is inappropriate to the discussion, you can bring it to our attention by using the report abuse links. As the comments are written and submitted by visitors of the The Paypers website, they in no way represent the opinion of The Paypers.