Avast Software has warned of a new mining malware targeting the privacy cryptocurrency Monero (XMR), which is being distributed via cracked copies of popular video games.
The cybersecurity company avast Software has published a report about a new cryptomining malware that hides in video games, to hijack the computing power of users' computers and mine Monero (XMR), the cryptocurrency privacy-focused.
According to Avast's report, the new malware called crackonosh Crackonosh uses illegal, cracked copies of popular video game software to infect users’ computers and use their power to illegally mine cryptocurrency. Crackonosh, Avast researchers explain, seeks out and disables many popular antivirus programs, including Avast’s own, to remain undetected and undetectable.
In fact, researchers discovered the malware thanks to warnings from several users and customers of the company on Reddit, who reported that Avast antivirus was being disabled on their systems. The warnings led cybersecurity researchers to discover the cryptomining malware, reportedly of Czech origin.
It may interest you: Danger in the crypto industry: New Malware stalks Bitcoin users and DeFi hackers
Crackonosh on copies of the most popular video games
Avast clarified that the original video game software, which comes from legitimate sources, is not infected with the malware, but rather illegal copies of these games. Titles such as Far Cry 5, NBA 2K19, The Sims 4, Grand Theft Auto V, Call of Cthulhu, Pro Evolution Soccer 2018, and Jurassic World Evolution are some of the games infected with Crackonosh.
Source: Avast Software
Once users download and install the gaming software, it triggers a whole installation process for Crackonosh. As the company's researchers indicate, the malware does not manipulate any files on the system, but instead activates safe mode in Windows to disable antivirus features and use the computational power of the infected device to mine Monero.
$2 million dollars mined in Monero (XMR)
Crackonosh has been in operation since June 2018, and from that date until December 2020 it has generated profits for its creators of more than 9.000 XMR, valued at around 2 million dollars.
It is worth noting that Avast researchers found several wallets belonging to XMRig, the cryptocurrency miner installed by the malware. One of these wallets showed the Monero earnings that the researchers report.
Avast also showed a map showing the locations most affected by the malware. By December 2020, Crackonosh had infected nearly 220.000 computers in various parts of the world, with the United States, Brazil, India and Poland being the most affected. However, by May of this year, the number of infections had decreased and was around 1.000 infected devices, the report said.
Source: Avast Software
All users with infected devices reported that their computers had become potentially slow. Avast explains that this is due to the excessive consumption of computing resources by the cryptomining malware.
The company's researchers also provided instructions for detecting and removing Crackonosh, in case of an infected device.
Malwares and cryptocurrencies
Cryptocurrency mining malware has become popular with the rise of these digital assets. In May, independent cybersecurity researcher, Oliver Hough, reported on malware focused on stealing email keys and passwords private keys Plans Wallets of cryptocurrencies.
Continue reading: Phishing returns to MetaMask to steal cryptocurrency wallets
