Security firm warns of new malware strain 'wreaking havoc' on Windows PCs

Malware
(Image credit: Pixabay (Elchinator))

During the Great GPU Shortage of Yesteryear, cryptocurrency mining was all the rage. This also gave way to a class of 'cryptojacking' malware that would attempt to pilfer computing resources from an infected PC and use them to most often mine Monero. That has not been a big concern in a long while. However, security researchers at Unit 42 have discovered a new self-propagating malware strain that is a variant of old cryptojacking code.

The researchers have dubbed it "Lucifer," noting that the malware's author(s) named it "Satan DDoS," which some people might confuse with the similarly named "Satan Ransomware."

No matter what you want to call it, the researchers say it is "quite powerful in its capabilities," which extend beyond unauthorized cryptocurrency mining. It can also facilitate distributed denial of service (DDoS) attacks and spread through computer networks using a range of exploits that were developed by and stolen from the US National Security Agency (like EternalBlue).

Attacks have come in waves. The first one ended on June 10, 2020, but then a second wave kicked off the next day with an upgraded version that is "wreaking havoc." This second campaign is ongoing.

Enterprise organizations are likely most at risk, in part because they do not always stay up to date with security patches. However, Lucifer exploits a range of vulnerabilities that also affect home PCs.

"While the vulnerabilities abused and attack tactics leveraged by this malware are nothing original, they once again deliver a message to all organizations, reminding them why it’s utterly important to keep systems up-to-date whenever possible, eliminate weak credentials, and have a layer of defenses for assurance," the researchers say.

The best line of defense against Lucifer is to ensure that Windows is fully patched with the latest updates. And the second line of defense is to use a strong password for your Windows login (and any account, really). That's because Lucifer attempts to brute-force its way into Windows systems, meaning it bombards PCs with commonly used login usernames (like administrator) and passwords (like 123123).

Thanks, ThreatPost

Paul Lilly

Paul has been playing PC games and raking his knuckles on computer hardware since the Commodore 64. He does not have any tattoos, but thinks it would be cool to get one that reads LOAD"*",8,1. In his off time, he rides motorcycles and wrestles alligators (only one of those is true).

Latest in Hardware
A woman wearing a VR headset with dramatic, colourful lighting across the background
'World’s smallest LEDs' could lead to accurately lit screens with 127,000 pixels per inch and much more immersive VR
The NES themed 8BitDo Retro mechanical gaming keyboard on a blue background
I love the 8BitDo Retro C64 keyboard but I'd pick its cheaper NES-themed model near its lowest price ever during Amazon's Big Spring Sale
The snazzy red and black HyperX Cloud Alpha wireless headphones float in a teal void. The microphone is attached to the headset.
The best wireless gaming headset is now even better in the Amazon Big Spring Sale, boasting a more than $50 discount
A chip being held up in an Intel fab
Intel is reportedly 'working to finalize commitments from Nvidia' as a foundry partner, suggesting gaming potential for the 18A node
Amazon box
Don't panic! The 'Do Not Send Voice Recordings' option Amazon just removed was only used by 0.03% of customers and they can still have it
Digital generated image of people surrounded by interactive transparent and glowing panels with data. Visualising smart technology, blockchain and artificial intelligence
Now I shall demand the cookies! Proposed new browsing agreement turns the tables and lets users dictate terms to websites
Latest in News
An Enshrouded player in a recreation of Erebor from The Lord of the Rings
Kings under the Mountain! 33 Enshrouded players spent 10,000 hours to recreate this iconic location from The Lord of the Rings
A mech awakens.
Mecha Break developer is considering unlocking all mechs following open beta feedback
Lara Croft Unified Art
Tomb Raider developer Crystal Dynamics lays off 17 employees 'to better align our current business needs and the studio's future success'
A long bendy arm stealing money from people in a subway car
'You're a very long arm. You steal things. It's a comedy game,' explains developer of comedy game where you steal things with a very long arm
The heroes are attacked by monsters
Pillars of Eternity is getting turn-based combat to mark its 10th anniversary, and that means PC Gamer editors will soon be arguing about combat mechanics again
Image of Ronaldo from Fatal Fury: City of the Wolves trailer
It doesn't really make sense that soccer star Ronaldo is now a Fatal Fury character, but if you follow the money you can see how it happened