X-Industry

Activity Summary - Week Ending 29 January 2021:

• Red Sky Alliance observed 62 unique email accounts compromised with Keyloggers
• Analysts identified 39,701 connections from new unique IP addresses
• British Telecommunications has Compromised C2 Servers
• Researchers identified 1,619 new IP addresses participating in various Botnets
• Hancitor Malware
• OSAMiner & Crypto-miner Campaigns
• Zyxel Firewalls the Backdoor is Open
• Mimecast Compromised
• Malwarebytes Caught in the Wind, SolarWinds
• Dell/SonicWall hit

A cryptocurrency mining campaign targeting macOS is using malware that has evolved into a complex variant giving researchers a lot of trouble analyzing it.  The malware is tracked as OSAMiner and has been in the wild since at least 2015.  Analyzing it has been difficult because payloads are exported as run-only AppleScript files, which makes decompiling them into source code difficult.

OSAMiner is a typical Trojan which mainly cause system vulnerability on PCs to help hackers’ remote attack. Use