ŪŗÁ‚ŗŪŤŚ

Monero Mining Malware Attack Linked to Egyptian Telecom Giant

Monero Mining Malware Attack Linked to Egyptian Telecom Giant

Unidentified entities at a telecom company connected to the Egyptian government are using malware to trick Middle Eastern Web users into unwittingly mining monero, according to a new report.

Internet users in Turkey and Syria who downloaded Windows applications such as Avast Antivirus, CCleaner, Opera, or 7-Zip were unknowingly redirected to malicious versions with malware, the University of Toronto's Citizen Lab claimed in a study published Friday.

The report†- which calls this scheme "AdHose - explained:

"We found that a series of middleboxes on T?rk Telekom's network were being used to redirect hundreds of users attempting to download certain legitimate programs to versions of those programs bundled with spyware....We found similar middleboxes at a Telecom Egypt demarcation point. The middleboxes were being used to redirect users across dozens of ISPs to affiliate ads and browser cryptocurrency mining scripts."

Telecom Egypt is a major state-owned telecommunications company, and the middleboxes in question include Sandvine PacketLogic devices, which have been associated with government surveillance in Turkey and Syria. The researchers' regional network sweep in January found 5,700 devices affected by AdHose.

When reached†for comment, Sandvine pushed back against the report's findings, telling CoinDesk:

"Based on a preliminary review of the report, certain Citizen Lab allegations are technically inaccurate and intentionally misleading....We have never had, directly or indirectly, any commercial or technology relationship with any known malware vendors, and our products do not and cannot inject malicious software.†While our products include a redirection feature, HTTP redirection is a commodity-like technology that is commonly included in many types of technology products."

The spokesperson also said that an investigation into the allegations is being undertaken because the company is "deeply committed to ethical technology development."

The idea of cryptocurrency-fueled government spyware may seem far-fetched. However, researchers involved with the Tor Project's Open Observatory of Network Interference noted a similar malware epidemic -†minus the cryptocurrency mining element - in 2016. Tor researchers found the Telecom Egypt-owned internet provider TE Data, which controls the majority of Egyptian internet bandwidth, facilitated a man-in-the-middle attack with both malware and affiliate advertising.

Egyptian flag and bitcoin image via Shutterstock

12.03.2018 / 00:09 60
Attack Or Business Opportunity?: Academics Question Ethics Of Coinhive Cryptojacking Attack Or Business Opportunity?:
A recently released academic report from Concordia University looks into the ethics behind browser-based cryptocurrency mining, focusing on the case
Report Shows Egypt is Covertly Mining Cryptocurrency on Citizensí Computers Report Shows Egypt is Covertly Mining
The Egyptian government has been called out in a new report that suggests they are not only spying on and censoring their citizensí internet but also
Report Alleges Egyptian Government is Secretly Mining Cryptocurrencies on Citizensí Devices Report Alleges Egyptian Government is
An investigation by The Citizen lab has found evidence that Egyptian authorities are mining cryptocurrencies on citizenís computers and laptops.
Internet Providers Caught Deploying Crypto Mining Malware Internet Providers Caught Deploying
If it wasnít bad enough with hackers and dodgy websites trying to hijack your computer hardware to mine some crypto coins, ISPs have been discovered
Microsoft Thwarts Massive Electroneum Mining Malware Campaign Microsoft Thwarts Massive Electroneum
Microsoftís Windows Defender reportedly managed to prevent a massive Electroneum (ETN) mining campaign from spreading, according to the IT giant. Per
Telecom Egypt Covertly Redirecting Internet Users To Crypto Mining Sites, Report Says Telecom Egypt Covertly Redirecting
A study has shown that Egyptian Internet user traffic is being manipulated by govt-linked entities to redirect users to crypto mining sites and ads.
Comments (0)
Add a comment
Comment on