[opendtv] Infecting DVRs with Bitcoin-mining malware even easier than you suspected

  • From: Monty Solomon <monty@xxxxxxxxxx>
  • To: undisclosed-recipient:;
  • Date: Tue, 6 May 2014 07:50:50 -0400

Infecting DVRs with Bitcoin-mining malware even easier than you suspected
It took just a day for the Internet-connected device to be under
attackers' spell.

by Dan Goodin
May 5 2014
Ars Technica

It took just one day for a low-end, Internet-connected digital video
recorder to become infected with malware that surreptitiously mined
Bitcoins on behalf of the quick-moving attackers.

The feat, documented in a blog post published Monday by researchers
at the security-training outfit Sans Institute, was all the more
impressive because the DVR contained no interface for downloading
software from the Internet. The lack of a Wget, ftp, or kermit
application posed little challenge for the attackers. To work around
the limitation, the miscreants used a series of Unix commands that
effectively uploaded and executed a Wget package and then used it to
retrieve the Bitcoin miner from an Internet-connected server.

...

http://arstechnica.com/security/2014/05/infecting-dvrs-with-bitcoin-mining-malware-even-easier-you-suspected/

 
 
----------------------------------------------------------------------
You can UNSUBSCRIBE from the OpenDTV list in two ways:

- Using the UNSUBSCRIBE command in your user configuration settings at 
FreeLists.org 

- By sending a message to: opendtv-request@xxxxxxxxxxxxx with the word 
unsubscribe in the subject line.

Other related posts:

  • » [opendtv] Infecting DVRs with Bitcoin-mining malware even easier than you suspected - Monty Solomon