- Threat Encyclopedia
- Malware
- Coinminer.Linux.KERBERDS.A
HEUR:RiskTool.Linux.BitCoinMiner.n(Kaspersky)
Linux
Downloaded from the Internet
This new version of KERBERDS, a known crypto-mining malware that uses an ld.so.preload-based rootkit for stealth, was seen propagating by telnet bruteforce attacks.
This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It uses the system's central processing unit (CPU) and/or graphical processing unit (GPU) resources to mine cryptocurrency.
912,264 bytes
ELF
Yes
24 Oct 2019
Connects to URLs/IPs
Arrival Details
This Coinminer arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Other Details
This Coinminer does the following:
It uses the system's central processing unit (CPU) and/or graphical processing unit (GPU) resources to mine cryptocurrency. This behavior makes the system run abnormally slow.
9.850
15.450.07
24 Oct 2019
15.451.00
25 Oct 2019
Scan your computer with your Trend Micro product to delete files detected as Coinminer.Linux.KERBERDS.A. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check the following Trend Micro Support pages for more information: