More than 12,000 Vietnamese computers infected with cryptocurrency mining malware

Cryptocurrency mining malware spreads rapidly through Facebook Messenger in Vietnam and a new variant appears every 10 minutes.

According to Bkav, as of the afternoon of December 21, more than 12,600 computers in Vietnam were infected with cryptocurrency mining malware transmitted via Facebook. According to the cybersecurity company, hackers release a new virus variant every 10 minutes to avoid detection by security software.

Experts say the number of computers infected with malware will continue to increase sharply in the coming time. At the same time, the number of 500 variants of this cryptocurrency mining malware shows no signs of stopping.

Cryptocurrency mining malware has a variant spreading in Facebook groups.

"The hacker's motive is clear: to infect as many computers as possible with viruses to mine virtual money. Even more dangerous, the malware also has a built-in function to steal Facebook passwords," he said.Mr. Vu Ngoc Son, Vice President in charge of Anti Malware of Bkav, commented.

Hackers have now released a variant that allows them to post to Facebook groups instead of just sending it via Messenger like in the first version. The virus uses the victim's account to download fake videos containing malicious code and intriguing content like "woow hot video". The attached file has a title like "sex_video_xxxx.zip", where xxxx is 4 random numbers. This causes the number of victims to increase exponentially.

The cryptocurrency mining malware that spreads through Facebook broke out on December 19 and has been causing chaos on the Internet in Vietnam in recent days. Initially, the virus was spread through Messenger messages, disguised as a fake video. If the file is opened, the computer will be infected with the malware, taking control and being exploited to mine cryptocurrency, causing the device to constantly lag and become almost unusable.

Security experts recommend that users be vigilant when receiving files sent via Messenger or files shared on groups. It is best to open files in a safe isolation environment (Safe Run) to avoid infection with malware. If infected or suspected of being infected with malware, scan with anti-virus software and change your Facebook password immediately.

According to VNE