Skip to content
Artwork for CyberWire Daily
CyberWire Daily · Jul 20, 2019 · 20 min

Nansh0u not your normal cryptominer. [Research Saturday]

Researchers at Guardicore Labs have been tracking an unusual cryptominer that seems to be based in China and is targeting Windows MS-SQL and phpMyAdmin servers. Some elements of the exploit make use of sophisticated components previously associated with nation-state actors. Ophir Harpaz and Daniel Goldberg are members of the Guardicore Labs team, and they join us to explain their findings. The research can be found here - https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/

0:00-20:06

transcript

No transcript — this publisher did not publish one.

show notes

Researchers at Guardicore Labs have been tracking an unusual cryptominer that seems to be based in China and is targeting Windows MS-SQL and phpMyAdmin servers. Some elements of the exploit make use of sophisticated components previously associated with nation-state actors.

Ophir Harpaz and Daniel Goldberg are members of the Guardicore Labs team, and they join us to explain their findings.

The research can be found here - 

https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/

links1

more episodes

All episodes