Connect with us

Mining

Over 800k servers at risk due to new cryptojacking malware exploiting PostgreSQL

Published

on



Researchers at Aqua Nautilus have uncovered a new malware that targets PostgreSQL servers to deploy cryptocurrency miners.

The cybersecurity firm has identified over 800,000 servers that are potentially vulnerable to a cryptojacking campaign targeting PostgreSQL, an open-source relational database management system used to store, manage, and retrieve data for various applications.

According to a research report shared with crypto.news, the so-called “PG_MEM” malware starts by attempting to gain access to PostgreSQL databases with a brute force attack and manages to infiltrate databases with weak passwords.

Once the malware infiltrates the system, it establishes a superuser role with administrative privileges, enabling it to take full control of the database and block access for other users. With this control, the malware executes shell commands on the host system, facilitating the download and deployment of additional malicious payloads.

According to the report, the payloads contain two files designed to allow the malware to evade detection, set up the system for cryptocurrency mining, and deploy the XMRIG mining tool used to mine Monero (XMR). 

XMRIG is often used by threat actors due to Monero’s hard-to-trace transactions. Last year, an educational platform was compromised in a cryptojacking campaign where attackers deployed a hidden script that installed XMRIG on every visitor’s system.

Malware hijacks PostgreSQL servers to deploy crypto miners

Analysts found that the malware removes existing cron jobs, which are scheduled tasks that run automatically at specified intervals on a server and creates new ones to ensure that the crypto miner continues to run.

This allows the malware to continue its operations even if the server is restarted or if some processes are temporarily stopped. To remain unnoticed, the malware deletes specific files and logs that could be used to track or identify its activities on the server.

The researchers warned that while the campaign’s primary goal is to deploy the cryptocurrency miner, attackers also gain control of the affected server, highlighting its severity.

Cryptojacking campaigns targeting PostgreSQL databases have been a recurring threat over the years. In 2020, Palo Alto Networks’ Unit 42 researchers uncovered a similar cryptojacking campaign involving the PgMiner botnet. In 2018, the StickyDB botnet was discovered, which also infiltrated servers to mine Monero.



Source link

Bitcoin

Hut 8 deepens Bitmain partnership with launch of new ASIC miner in 2025

Published

on



Bitcoin miner Hut 8 is expanding its partnership with Bitmain to introduce a new ASIC miner with direct liquid-to-chip cooling, set to deploy in Q2 2025.

Miami-headquartered crypto mining firm Hut 8 has expanded its partnership with Bitmain, announcing the upcoming launch of the U3S21EXPH, a next-generation ASIC miner capable of reaching up to 860 TH/s.

In a Sept. 19 press release, the company the miner, which is scheduled for deployment in Q2 2025, is the first mass-commercialized ASIC model to feature direct liquid-to-chip cooling in a U-form factor.

“We believe this model represents a more thoughtful approach to capturing the lucrative economics offered by next-generation machines, reducing upfront capital requirements while we continue to pursue growth initiatives in AI infrastructure.”

Asher Genoot, Hut8 chief executive officer

Under the hosting agreement, Hut 8 has the option to purchase all or a portion of the hosted miners in up to three tranches at a fixed price within six months of deployment. If Hut 8 exercises the option in full, the company’s self-mining hashrate is expected to increase from 5.6 EH/s to 20.6 EH/s, the press release reads.

The agreement is designed to minimize upfront capital expenditures and provide flexibility for future purchases, allowing Hut 8 to assess market conditions “before committing additional capital,” per the document.

The news comes after Hut 8 secured a $150 million investment in June from Coatue Management to accelerate its artificial intelligence infrastructure development. At the time, Hut 8 said the investment was made as “many traditional data center operators are failing to meet the surging demand for AI compute capacity due to power shortages.”



Source link

Continue Reading

Asia

Bhutan’s Bitcoin Holdings Revealed: Kingdom Owns $780M in BTC from Mining

Published

on


South Asian country Bhutan, a Buddhist kingdom on the Himalayas’ eastern edge, has been revealed as a major Bitcoin holder, owning 13,011 BTC worth around $780.49 million, according to a report by Arkham Intelligence. The public data company identified Bhutan’s Bitcoin addresses, marking the first time this information has been publicly shared.

“Bhutan is the 4th largest government with Bitcoin holdings on our platform, with over $750M in BTC,” Arkham stated on X. “Unlike most governments, Bhutan’s BTC does not come from law enforcement asset seizures, but from Bitcoin mining operations, which have ramped up dramatically since early 2023.”

Arkham

Arkham

Bhutan’s Bitcoin mining activities are conducted by the Kingdom’s investment arm, Druk Holdings. According to Arkham, the country has constructed mining facilities at multiple sites, with the largest on the grounds of the defunct Education City project. Arkham further noted, “We were able to corroborate the timeline of on-chain mining activity with time-lapse satellite imagery of facility construction.”

In May of 2023, Bitdeer partnered with Druk Holding & Investments to develop the 100% carbon-free Bitcoin mining operation in Bhutan.

Earlier this year, a Bloomberg report revealed that Druk Holding & Investments and Bitdeer were expanding their mining capacity from 100 to 600 megawatts. Bhutan’s focus on eco-friendly mining is bolstered by its abundant hydropower resources, making it an ideal location for eco-friendly mining.





Source link

Continue Reading

Bitcoin

CleanSpark acquiring seven Bitcoin mining facilities in Tennessee

Published

on



CleanSpark has announced plans to acquire seven Bitcoin mining facilities in Knoxville, Tennessee, for $27.5 million. 

The purchase will add over 85 megawatts of available capacity, and the company expects to close the deals by Sept. 25, according to a press release. 

This move will increase CleanSpark’s hash rate by 5 exahashes per second, a 22% jump from its current capacity. The company recently surpassed 23 EH/s and aims to reach 37 EH/s by the end of 2024.

In August, CleanSpark acquired a Bitcoin mining site in Wyoming despite national security concerns raised earlier in the year. The acquisition proceeded even after President Biden’s emergency order to halt operations at sites near sensitive military installations due to potential espionage risks.

Analyst thoughts

Analysts from H.C. Wainwright view CleanSpark’s acquisition of the seven Tennessee Bitcoin (BTC) mining facilities as a strong strategic move, highlighting the company’s ability to source high-quality infrastructure at a favorable valuation.

With this acquisition, CleanSpark can focus on integrating the latest S21 pro miners to maximize its output. The company also plans to use a community-oriented approach to expand operations in Tennessee.

With a price of approximately $323,500 per megawatt, CleanSpark has secured the lowest price per developed MW for any mining deal in 2024, according to the firm’s BTC Miner M&A Deal Tracker, Wainwright analysts noted.

CEO Zach Bradford highlighted Tennessee’s favorable political and energy environment compared to Georgia, where CleanSpark operates 500 MW of facilities.

“Tennessee has a similar political and energy environment to Georgia, where we’ve deployed nearly $1B of capital and operate nearly 500 MW… applying the same winning community-oriented strategy to The Volunteer State is our plan as we expand our presence in the region and continue showcasing how Bitcoin can benefit the local power grid and communities where we’re located.”

Zach Bradford, CleanSpark CEO

CleanSpark’s stock is currently trading at $9.30 per share, but analysts see this news as a buying opportunity and reiterated their “Buy” rating on CleanSpark, maintaining a $27 price target.





Source link

Continue Reading
Advertisement [ethereumads]

Trending

    wpChatIcon