Another large-scale cyberattack underway – experts

Another large-scale, stealthy cyberattack is underway on a scale that could dwarf last week’s assault on computers worldwide, a global cybersecurity firm tells AFP.

The new attack targets the same vulnerabilities the WannaCry ransomware worm exploited but, rather than freeze files, uses the hundreds of thousands of computers believed to have been infected to mine virtual currency.

Following the detection of the WannaCry attack on Friday, “researchers at Proofpoint discovered a new attack linked to WannaCry called Adylkuzz,” says Nicolas Godier, a researcher at the computer security firm.

Instead of completely disabling an infected computer by encrypting data and seeking a ransom payment, Adylkuzz uses the machines it infects to “mine” in a background task a virtual currency, Monero, and transfer the money created to the authors of the virus.

“As it is silent and doesn’t trouble the user, the Adylkuzz attack is much more profitable for the cybercriminals. It transforms the infected users into unwitting financial supporters of their attackers,” says Godier.

The firm believes Adylkuzz has been on the loose since at least May 2, and perhaps even since April 24, but due to its stealthy nature was not immediately detected.

— AFP