Once again, Monero (XMR) is involved in another cryptojacking scandal with hackers using up to a thousand corporate servers for XMR mining.
Hackers have once again attacked one of the popular cryptocurrency known as Monero by installing a hidden miner on about a thousand corporate servers. The Blue Mockingbird hacking group which has been active since 2019 has been confirmed to be responsible according to cybersecurity researchers from Red Canary.
“The group exploited the vulnerability (CVE-2019-18935) present in Telerik framework on public-facing servers running ASP.NET applications and by also using the “Juicy Potato technique to get complete access into the webserver for installing a notorious mining app called XMRRig for Monero (XMR).” Red Canary added that other computers can be infected too if access is allowed by the server.
CVE-2019-18935 vulnerability is considered as extremely dangerous having been previously exploited by cybercriminals on several occasions and with just a method available for prevention which is by blocking the exploitation of the vulnerability at the firewall stage.
Red Canary stated that only a few number of organizations monitored were victims of this attack, even though they recorded up to a thousand server attacks, the total number of systems hacked may have been more, this is due to the limitation most security firms have when it comes to getting the accurate percentage or scope of a threat of this nature.
The Future Of Monero XMR
However, XMR/USD bounced back from the recent low, ignoring the malicious hack incident after going as low as $60.04 on Monday to $61.84 as at the time of this report, staying mostly unchanged since then. Monero (XMR) is rated 16th on the global cryptocurrency rating board with a capital base worth 1 billion dollars.
Monero (XMR) is a similar digital currency to Bitcoin with a potent level of anonymity for users’ transactions, boasting of better security perimeters than other cryptocurrencies. Monero (XMR) transactions between two users are grouped with a few other transactions from unrelated users and split the amount transferred into smaller parts before handling each spit as a unique transaction.