NSA 'DoubleStar' Backdoor Blamed for Cryptocurrency Mining Malware

WannaCry

On Friday, May 12 there was a massive ransomware attack against computer systems around the globe. The ransomware, known as WannaCry used leaked NSA exploits(EternalBlue, DoublePulsar) to access computers. The attack captured headlines around the globe and caused a panic among computer security professionals.

"DoublePulsar has also been identified as a factor in the recent "WannaCry" ransomware attacks, which impacted hundreds of thousands of computers across the globe." Source

NSA 'DoubleStar' Backdoor Blamed for Cryptocurrency Mining Malware

"A type of cryptocurrency mining malware has spread due to an exploit developed by the US National Security Agency, according to cybersecurity researchers."

"According to Dr.Web, a Russian anti-virus vendor, the NSA's "DoublePulsar" backdoor – which was leaked earlier this year by a group called the Shadow Brokers – allows the entry of a Trojan program that installs software to secretly mine the privacy oriented digital currency monero."

"Cryptocurrency mining is an energy intensive process by which new transactions are added to a blockchain, creating new coins as a reward in the process." Source

In a 15th June blog post, Dr.Web laid out the nuts and bolts of the malware, noting:

"This malicious program, designed for mining the Monero (XMR) cryptocurrency, was dubbed Trojan.BtcMine.1259. Trojan.DownLoader24.64313 downloads the miner to a computer. This loader Trojan is distributed via the backdoor DoublePulsar."

Conclusion

This is another example of the danger of governments hoarding security exploits without informing Tech companies so they can be fixed. Leaked exploits can wreak havoc on computer systems and cause millions of dollars in damages.

I would expect to see similar attacks in the future as cryptocurrency continues to develop and mature.

Undoubtedly, each time we see an event like this it will be used to demonize cryptocurrency, especially those which a privacy focused like Monero.

As governments move against crypto with regulation and new laws like the Combating Money Laundering, Terrorist Financing and Counterfeiting Act of 2017 and Project TITANIUM, it is important to remember the damage done by those same governments. Governments will always argue for more regulation and less privacy. Some regulation is needed and a good thing.

Regulation is not inherently bad and neither is privacy...