Cybersecurity-based Varonis announced the launch of the new Norman virus miner, which hides its presence on the task list. The report says that Norman was accidentally discovered during an audit of the attacked company.
The main feature of the antivirus program is that when you open the task manager in Windows, the program ends the miningMining
– is a type of activity for creating new blocks in the Blockchain to ensure proper system operation. Details process, so that the user does not know that his computer was infected. After closing the task manager, cryptocurrency mining starts again.
After implementation, it overwrites its entry in explorer.exe to hide evidence of his presence. It also stops the miner when a PC user opens the task manager.
Please note that Norman produces Monero cryptocurrency using the popular XMRig miner. The virus is written in the NET programming language and is obfuscated using Agile.
Varonis has discovered the new secretive Norman virus. Recall that attackers stole $4.26 billion from crypto-investors and crypto-business for the two quarters of 2019.
Editor: Jerg Wos