Cryptocurrency Mining Botnet Using Leaked NSA Exploit, UK to Crack Down on Companies with Lax Infosec
Infosec News
INFORMATION SECURITY NEWS
For The Week of 1/30-2/6 2018
The Information Security News Service is a project of LARS (Laboratory for Advanced Research in Systems) in the CS Department at the University of Minnesota Duluth. We send out top stories in information security every Tuesday (except during some academic breaks). If you have stories you’d like to see featured, please email them to infosec...@d.umn.edu.
CURRENT NEWS
UK to Fine Companies Up to 17 Million Pounds for Bad Cyber Security
Companies in some the energy, transport, water, and health sectors in the UK will be inspected for the quality of their cyber security. If they are found to be lacking in their preparedness, the companies can be fined up to 17 million pounds. The new rules go into effect May 10, and guidances have been released by the National Cyber Security Centre.
The guidance: https://www.ncsc.gov.uk/guidance/nis-guidance-collection
Cryptocurrency Mining Malware Infected Over 500,000 Machines using NSA Exploit
A new cryptocurrency mining botnet called “Smominru” is using the EternalBlue exploit. EternalBlue is an NSA exploit that was leaked by the Shadow Brokers and is the same exploit used by the WannaCry ransomware. The botnet has infected over half a million computers, and have made about 3.6 million dollars so far.
https://thehackernews.com/2018/01/cryptocurrency-mining-malware.html