Archive for the ‘Cryptocurrency’ Category

8220 Gang Exploiting Oracle WebLogic Flaw to Hijack Servers and Mine Cryptocurrency – The Hacker News

The notorious cryptojacking group tracked as 8220 Gang has been spotted weaponizing a six-year-old security flaw in Oracle WebLogic servers to ensnare vulnerable instances into a botnet and distribute cryptocurrency mining malware.

The flaw in question is CVE-2017-3506 (CVSS score: 7.4), which, when successfully exploited, could allow an unauthenticated attacker to execute arbitrary commands remotely.

"This allows attackers to gain unauthorized access to sensitive data or compromise the entire system," Trend Micro researcher Sunil Bharti said in a report published this week.

8220 Gang, first documented by Cisco Talos in late 2018, is so named for its original use of port 8220 for command-and-control (C2) network communications.

"8220 Gang identifies targets via scanning for misconfigured or vulnerable hosts on the public internet," SentinelOne noted last year. "8220 Gang is known to make use of SSH brute force attacks post-infection for the purposes of lateral movement inside a compromised network."

Earlier this year, Sydig detailed attacks mounted by the "low-skill" crimeware group between November 2022 and January 2023 that aim to breach vulnerable Oracle WebLogic and Apache web servers and deploy a cryptocurrency miner.

It has also been observed making use of an off-the-shelf malware downloader known as PureCrypter as well as a crypter codenamed ScrubCrypt to conceal the miner payload and evade detection by security software.

In the latest attack chain documented by Trend Micro, the Oracle WebLogic Server vulnerability is leveraged to deliver a PowerShell payload, which is then used to create another obfuscated PowerShell script in memory.

This newly created PowerShell script disables Windows Antimalware Scan Interface (AMSI) detection and launches a Windows binary that subsequently reaches out to a remote server to retrieve a "meticulously obfuscated" payload.

The intermediate DLL file, for its part, is configured to download a cryptocurrency miner from one of the three C2 servers 179.43.155[.]202, work.letmaker[.]top, and su-94.letmaker[.]top using TCP ports 9090, 9091, or 9092.

Trend Micro said recent attacks have also entailed the misuse of a legitimate Linux tool called lwp-download to save arbitrary files on the compromised host.

"lwp-download is a Linux utility present in a number of platforms by default, and 8220 Gang making this a part of any malware routine can affect a number of services even if it were reused more than once," Bharti said.

"Considering the threat actor's tendency to reuse tools for different campaigns and abuse legitimate tools as part of the arsenal, organizations' security teams might be challenged to find other detection and blocking solutions to fend off attacks that abuse this utility."

Original post:

8220 Gang Exploiting Oracle WebLogic Flaw to Hijack Servers and Mine Cryptocurrency - The Hacker News

Cryptocurrency Cosmos Hub Down More Than 3% Within 24 hours – Benzinga

Over the past 24 hours, Cosmos Hub's ATOM/USD price has fallen 3.57% to $10.54. This continues its negative trend over the past week where it has experienced a 5.0% loss, moving from $11.07 to its current price.

The chart below compares the price movement and volatility for Cosmos Hub over the past 24 hours (left) to its price movement over the past week (right). The gray bands are Bollinger Bands, measuring the volatility for both the daily and weekly price movements. The wider the bands are, or the larger the gray area is at any given moment, the larger the volatility.

The trading volume for the coin has fallen 36.0% over the past week which is opposite, directionally, with the overall circulating supply of the coin, which has increased 0.02%. This brings the circulating supply to 292.59 million. According to our data, the current market cap ranking for ATOM is #23 at $3.08 billion.

Powered by CoinGecko API

This article was generated by Benzinga's automated content engine and reviewed by an editor.

2023 Benzinga.com. Benzinga does not provide investment advice. All rights reserved.

Read more from the original source:

Cryptocurrency Cosmos Hub Down More Than 3% Within 24 hours - Benzinga

Cryptocurrency markets brace for today’s Bitcoin and Ethereum … – InvestorsObserver

Cryptocurrency markets brace for todays Bitcoin and Ethereum options expiry details

2023-05-19 00:28:48 ET

The crypto market s economic calendar has a notable event, with significant amounts of Ethereum and Bitcoin options set to expire today (19 May 2023). Moreover, the volumes are striking, and will likely affect price actions within the cryptocurrency world.

Bitcoin has approximately 29,000 options awaiting expiry today. Currently, the leading crypto has a 0.81 Put Call Ratio, whereas the maximum pain point stands near the $27.5K mark. Converting the contracts in dollars results in a substantial figure. The BTC contracts up for expiry have their value at around a staggering $780M.

Meanwhile, thats just part of the story. Ethereum also awaits similar events with a more significant figure. The second-largest crypto has 169,000 options awaiting expiry. They have a 0.96 Put Call Ratio with an approximately $1,800 maximum pain point. These contracts represent a massive $310M value.

Market participants will have to brace for these events. The crypto space will likely witness near-term volatility that will affect BTC and ETHs price actions . Remember, price movements by these leading tokens often trigger a ripple effect in the entire crypto industry, shifting the markets trajectory.

Crypto enthusiasts should prepare for possible price fluctuations. That can mean changing their trading styles. Remember, todays events might shift the cryptocurrency landscape, considering the industrys nature.

Staying informed remains the rule of the game in this dynamic industry. Traders, market watchers, and investors should remain informed about upcoming market events that could impact price movements. Thats crucial when interacting with the cryptos unpredictable nature.

The crypto market has lost yesterdays bullish steam, with most tokens sliding over the past day. Bitcoin trades at $26,847 during this writing, losing 1.84% within the last 24 hours.

Also, Ethereum dropped 1.33% in that timeframe, changing hands at $1,802 at press time. Some analysts believe Bitcoin might fall below $26K amid the ongoing price swings. Nonetheless, crypto pundits remain optimistic, forecasting impressive long-term trends for Bitcoin.

The post Cryptocurrency markets brace for todays Bitcoin and Ethereum options expiry details appeared first on Invezz .

Go here to read the rest:

Cryptocurrency markets brace for today's Bitcoin and Ethereum ... - InvestorsObserver

Hill & Johnson Lead Effort to Create Regulatory Framework for … – The Ripon Society

WASHINGTON, DC With cash falling by the wayside and electronic transactions increasingly becoming the norm, The Ripon Society held a breakfast discussion yesterday with two Members of Congress who are working to put in place a regulatory framework to govern cryptocurrency and other digital assets. The two Members were U.S. Reps. French Hill (AR-2) and Dusty Johnson (SD-AL).

Hill serves as Chairman of the Financial Services Subcommittee on Digital Assets, while Johnson serves as Chairman of the Agriculture Subcommittee on Commodity Markets and Digital Assets. Together, they are leading an effort to establish a framework that governs digital transactions in a way that encourages competition without stifling the innovation that has fueled the growth of the internet and American economy over the past 25 years.

Weve lost the forest for some individual trees in this digital asset debate, Hill said in remarks to kick off the discussion. Web 3.0, distributed ledgers, blockchain this is the future of what we think of as Web 1.0. If wed had this conversation in the 90s that were having now, I dont know what our GDP would be. Because in 1996, the Congress did two very important things. They passed the Telecommunications Act, which gave you your cellular and digital and texting services competitively that you have today, combined with essentially the breakup of AT&T. And they gave you a little-known resolution that Dusty is working on revising, which was former member and former chairman of the SEC Chris Coxs resolution about the internet.

What Congressman Cox was saying [with his resolution] is, Were going to do no harm here. Were not going to step in and meddle with the internet. Were not going to tax the internet. Were not going to regulate the internet. Were going to tax and regulate the activities that people do in the private sector using the internet. And we dont want to screw this up. We dont even know what itll do. And it says that in the resolution.

According to Hill, a similar spirit is guiding the effort that he and Johnson are leading today.

We want to make sure that we effectively do no harm, he stated, that we craft a regulatory framework that facilitates American innovation, American entrepreneurs, American academics, American consumers, American investors, all to participate in the future of this thing called Web 3.0 and the use of distributed ledgers. Thats all were talking about. And were going to do it in a way where consumers are protected, investors are clear on what theyre investing in, and that bad actors dont get the run of the country.

Johnson concurred, and opened his remarks by touching not only on the cross-jurisdictional nature of the effort he and Hill are heading up in Congress, but two of the federal agencies the Commodities Futures Trading Corporation and the Securities and Exchange Commission that have jurisdiction over the issue, as well.

People are often surprised that agriculture has as large a role in this as we do, the South Dakota lawmaker stated. The CFTC is the cop on the beat for the American futures market derivatives. And the CFTC is jurisdictional to ag. And when we look at cryptocurrency, somewhere between 70% and 80% of the digital tokens that are already out there by market cap are viewed by most everybody as commodities, meaning that they are jurisdictional to the CFTC and not to the SEC. That being said, I think we need that SEC cop on the beat.

Maybe the big boys like Bitcoin and almost certainly Ether function as commodities today. But in an innovative space where you have people trying to build something special, that does feel a lot more like buying stock in a company than it does buying an ounce of gold. And one of the major challenges that we will have as we put the finishing touches on the legislation were doing together is trying to figure out when does something graduate to big boy status. In the early innovative days, that feels like we need SEC protections, as it is just a commodity. When is the CFTC the more appropriate regulator? I think were getting really close. Decentralization seems like the right trigger, and were putting some meat on the bones about what constitutes sufficient decentralization.

Johnson noted that he and Hill also hope to fill an important regulatory gap that currently exists in the spot market.

In most commodities, he observed, you dont need a spot market regulator. If you want to go down to a retail store and buy an ounce of gold, the CFTC doesnt regulate that. If you want to buy grain person to person, the CFTC doesnt regulate that. Now, they do have some enforcement ability over fraud and abuse and some of the market-distorting activities. But theres not regulatory authority. They dont set the rules of the road. Almost everybody that we have had testify in front of either of our committees understands that kind of Laissez-faire approach probably doesnt work for the digital asset space You cant really afford to just let the State Attorney General or the county attorney do that work.

So I think we will have the CFTC be the cop on the beat for that spot market business. And by the way, industry understands that what French and I have been talking about will make it more likely that they can invest here, make it more likely that they can innovate here, and make it more likely that America will regain its position as the primary home to great blockchain technology development.

Following their remarks, Hill and Johnson were asked a number of questions, including one about the President and the approach his Administration is taking to creating a regulatory framework for digital assets.

I think President Biden recognizes the importance of the digital assets arena and the lack of a framework, Hill said. They put together a presidential working group on digital assets. I dont agree with everything that was written in their presidential working group reports or the executive order. But the point is that they did demonstrate that theyre interested in this arena. And we found that to be true last summer when Maxine Waters and Patrick McHenry began working on the first of several pieces of legislation here, which is a stablecoins bill to actually put stable in stablecoin. The Treasury and the Federal Reserve were very cooperative there in providing technical assistance, along with other bank regulators.

We only have one regulator thats sort of out of step in this process right now, and thats the SEC. Gary Gensler prided himself during his confirmation hearings that he taught a blockchain course at MIT. And then he impressed on all of us as he was sworn into office that he is the cop on the beat and that nothing happens without his careful touch in oversight. Well, a trillion dollars in losses later and a bunch of lawsuits later, we dont have a lot of leadership out of the SEC. We need that in order to ultimately be successful here. And we hope the Administration can bring Chairman Gensler into the fold on the need for a regulatory framework.

Johnson agreed.

Gensler is the biggest problem, he stated bluntly. Commissioner Peirce is very reasonable. Shes got more of a libertarian bent. I think she understands that we do want to create some space for innovation that a Gary Gensler regulatory regime would not. French is right the CFTC, theyre really squared away regulators. They really understand the concepts. They really understand their principles-based regime that they operate under and how that could well serve crypto. And they are, I think, quite effective when they come to the Hill and talk.

In addition to being asked about their work to create a regulatory framework for digital assets, the two lawmakers were also asked about another top priority facing Congress this month raising the debt limit and getting spending under control.

Yesterday was a very good day, Johnson said, referring to the meeting that was held Tuesday at the White House between the President and Congressional leaders. There werent any breakthroughs other than structure. I think having Shalanda [Young] and [Steve] Riccetti be Bidens people is exceptionally good news. I think having Garrett Graves and Brittan [Specht] be McCarthys people is exceptionally good news. And then, frankly, more important than all of that is kicking Schumer out of the room. It was really important for the President to do that.

Schumer has been nothing more than an intransigent blocker of progress. He really thinks he can jam us. It shows how little Chuck Schumer understands the Republican House. Weve been remarkably united. Listen, there are some more colorful elements of the Conference that simply will not in any way ever be pushed around by this White House. Frankly, I would put myself among their number in this regard. Inaction is not a strategy for dealing with a $32 trillion debt. And I think Chuck Schumer is beginning to understand the resilience and the resoluteness of the House Republicans. More importantly, the President does. Kicking Schumer out of the room was a big deal.

Hill echoed Johnsons remarks.

I think Joe Biden has taken his lead from Chuck Schumer, he said, and the Majority Leader in the Senate is wrong in this case. Hes fighting yesterdays war. And hes got the Democratic President, and hes got a split Senate with no votes, and hes got no 60 votes. So hes way overplayed his hand. I think he convinced the Biden Administration early on that McCarthy couldnt get it done. And McCarthy has a very time-tested strategy. Kevin McCarthy is a much better, much more effective, and will be a much more successful speaker because he went those 15 rounds the first week of January. That process seared a bonding nature inside our Conference like Ive never seen.

To view the remarks of Hill and Johnson at yesterdays breakfast discussion, please click the link below:

The Ripon Society is a public policy organization that was founded in 1962 and takes its name from the town where the Republican Party was born in 1854 Ripon, Wisconsin. One of the main goals of The Ripon Society is to promote the ideas and principles that have made America great and contributed to the GOPs success. These ideas include keeping our nation secure, keeping taxes low and having a federal government that is smaller, smarter and more accountable to the people.

Read the original post:

Hill & Johnson Lead Effort to Create Regulatory Framework for ... - The Ripon Society

Cryptocurrency Lido DAO Falls More Than 7% In 24 hours – Benzinga

Over the past 24 hours, Lido DAO's LDO/USD price has fallen 7.35% to $2.1. This is opposite to its positive trend over the past week where it has experienced a 21.0% gain, moving from $1.76 to its current price.

The chart below compares the price movement and volatility for Lido DAO over the past 24 hours (left) to its price movement over the past week (right). The gray bands are Bollinger Bands, measuring the volatility for both the daily and weekly price movements. The wider the bands are, or the larger the gray area is at any given moment, the larger the volatility.

The trading volume for the coin has tumbled 3.0% over the past week while the circulating supply of the coin has risen 0.14%. This brings the circulating supply to 879.30 million, which makes up an estimated 87.93% of its max supply of 1.00 billion. According to our data, the current market cap ranking for LDO is #33 at $1.85 billion.

Powered by CoinGecko API

This article was generated by Benzinga's automated content engine and reviewed by an editor.

2023 Benzinga.com. Benzinga does not provide investment advice. All rights reserved.

Visit link:

Cryptocurrency Lido DAO Falls More Than 7% In 24 hours - Benzinga