ISPs targeted in large-scale information stealing and cryptographic malware campaigns

Crypto Hackers aims to an Internet Service Provider (ISP). A massive attack campaign that includes Eastern European addresses targeting more than 4,000 addresses that correspond to the west coast of China and the US, through the efforts of Brute Force, according to a technical report from Splunk, the Cisco Security and Observability platform. “These IPs were targeted by using MassCan tools that allow operators to scan numerous IP addresses that can then be investigated for open port and credential brute force attacks,” the report specified. This campaign is intended to provide access to these hosts. The two main objectives are two main goals: to scan clipboard content and screenshots of cryptocurrency addresses and private keys, and to install cryptocurrency mining malware that uses host hardware features for Mine Monero (XMR).