The rtorrent application has been compromised by cryptohackers
Table of contents:
Hackers have taken advantage of a vulnerability in the popular rTorrent application to install cryptocurrency mining software on computers with Unix-like operating systems, this has generated benefits of $ 3, 900 so far.
rTorrent is the new target of cryptohackers
These vulnerabilities found are similar in some respects to what Google Project Zero researcher Tavis Ormandy recently reported on in the uTorrent and Transmission apps. That is why the users of these two must be very careful since they could become the next victim
Attacks targeting rTorrent are exploiting XML-RPC, an interface that uses HTTP and the most powerful XML to receive information from remote computers. rTorrent does not require any authentication for XML-RPC to work, what's more, the interface can execute shell commands directly in the operating system while rTorrent is running making it especially dangerous for users.
We recommend reading our post on What is Ethereum? All the information of the cryptocurrency with more "Hype"
Hackers are scanning the Internet for computers that are running RPC-enabled rTorrent applications and then exploiting them to install software that Monero mine, according to researchers at security firm F5, had already reached a combined balance of $ 3, 900 at the time of exit to light this information. At their current rate, attackers are generating around $ 43 a day.
The scenario of an attack against rTorrent is more severe than in the cases of uTorrent and Transmission, because attackers can exploit vulnerable rTorrent applications without requiring user interaction. In the cases of uTorrent and Transmission, on the contrary, they could be exploited only by the sites that the user actively visited.
It is unclear if there is an update to rTorrent that fixes the vulnerabilities found, its developer did not immediately respond to an email seeking comment on the matter.
Pordede has been hacked, user emails and passwords have been leaked
Pordede has been hacked, user emails and passwords have been leaked. Find out more about the attack suffered by the web.
Check if your email address has been sold using "have i been sold"
Check if your email address has been sold using "Have I Been Sold". Find out more about this website that helps you know if your data has been sold.
Apple denies that personal data has been compromised by the hacking of an Australian teenager
Apple denies that the personal data of users has been compromised after the hacking of an Australian teenager
