New Ransomware Strain is Locking Up Bitcoin Mining Rigs in China (zdnet.com)
A new strain of ransomware has been observed targeting Bitcoin mining rigs. ZDNet reports: At the time of writing, most of the infections have been reported in China, the country where most of the world's cryptocurrency mining farms are located. Named hAnt, this new ransomware strain was first seen in August of last year, but a new wave of infections has been reported hitting mining farms earlier this month. Most of the infected mining rigs are Antminer S9 and T9 devices, used for Bitcoin mining, but there have also been reports of hAnt infecting Antminer L3 rigs, used for mining Litecoin. In rare instances, Avalon Miner equipment (used for Bitcoin), were also reported as infected, but in much smaller numbers.
Bitcoin or real money?
Wonder if this is an attempt by someone who has control of a significant but non-majority amount of the transaction pool to artificially reduce the pool size to allow them to do a 51% attack? I'm not familiar with that side of Bitcoin or it's mechanisms so not sure if that is viable or even possible.
The only thing necessary for evil to triumph is for it to be pitted against a slightly greater evil
If victims fail to pay the ransom or infect at least 1,000 other devices, the ransom note threatens to turn off the mining rig's fan and its overheat protection, leading to the device's destruction.
If this happened to one of my devices, the first thing I'd be doing is attaching the fan(s) directly to the power supply. You won't get any fan regulation, and possibly a lot of fan noise, but you won't need to worry about overheating.
Also, people who write ransomware are callous scum.
I'd say Beijing is up to their old tricks to try to eliminate competition to their banking system?
First rule of holes; When in one, stop digging.
And suddenly light bulbs in China got a little brighter.
Better known as 318230.
holding for ransom, locking it up so it's not running, the thing that'll produce the coins to pay the ransom
Seems like the smarter thing to do would have been to subvert a coin every so often to a different location, since you already have control of the machine. That way it'll go undetected for a while and they'll probably make more than the ransom payout would have been.
Maybe, as some have suggested above, this is about more than ransom money.
It could be that they saw mining rigs as particularly vulnerable... or it could be they have a deeper motive.
"That's the way to do it" - Punch
...about not understanding bitcoin and how it must be literally tulips...
Actually, it would be amusing if someone created a Tulipcoin.
"That's the way to do it" - Punch
Prepare to be amused
https://tulipcoins.github.io
Been a thing for a while!
Prepare to be amused
I am amused.
"That's the way to do it" - Punch
Don't feed the trolls.
Bitcoin will be approaching "real" when you can buy the hardware to mine it and pay for the electricity to run it in bitcoin.
If it was not for a deeper motive, then why wouldn't they simply reprogram them to start diverting some mining power to benefit the attacker and
try to avoid detection?
The mining hardware would be much more valuable mining something for the attacker than sitting locked up waiting for a ransom --- for
the ransom to be worthwhile, it would have to be large enough that would also make it worthwhile for the mining operator to actually erase and reprogram the
device's firmware instead of paying that ransom.
So it's going to be ransomware thugs versus the Bitcoin community of child porn sites, drug traders, basement-dwelling conspiracy theorists - and yes, other ransomware developers who use Bitcoin to get ransom payments without being traced. All the scams in the world collapsing into a black hole as the rest of us applaud.
The fewer of these resistive heaters we have sucking otherwise useful energy and further warming our planet the better.
"Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife