In response to Kaspersky research finding that the fileless PowerGhost cryptomining malware is targeting corporate networks is moredifficult to detect than other miners because it doesn’t download malicious files to the device and so is likely to operate longer unnoticed, an expert with Corero Network Security offers comments.
Sean Newman, Director Product Management at Corero Network Security:
“Although the crypto-mining itself may or may not in some instances represent a security issue, the fact that malware can be planted in the first place does. This is especially worrying when you consider PowerGhost includes the ability to be armed with whatever attack payload the hacker chooses, which can easily include data exfiltration, and has already been shown to include evolving DDoS attack capabilities. And, of course, it shouldn’t be forgotten that crypto-jacking itself is not without impact, including reduced performance on workstations for legitimate users, increased power consumption costs from owned devices constantly running at high CPU rates and also their long-term damage, which can result in hardware failure.”
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.