Read Time:1 Minute, 32 Second
The cryptocurrency community has adopted Tox P2P messenger as a command and control server for decentralised exchanges.
The recent findings of Uptycs, where they analysed Executable and Linkable Format (ELF) named “72client,” stated that the artifact acts as a bot that can use the Tox protocol to run scripts on the hacked host.
Tox P2P messenger is a peer-to-peer serverless messaging system that uses Networking and Cryptography library (NaCl) for end-to-end encryption (E2EE). This library enables Tox to send encrypted messages between peers without leaking metadata like IP addresses or domain names.
“Since it’s serverless, it uses UDP and the DHT to find online peers, similar to what BitTorrent does. It is also meant to be anonymous, which means each user gets a public key that also acts as their ID within the system,” researchers Siddharth Sharma and Nischay Hedge said.
The researchers believe that the switch to using Tox makes it more difficult for law enforcement to take it down. Additionally, Tox allows crypto miners to avoid detection by traditional antivirus programs.
Cryptocurrency miners can generate significant profits for their operators. However, they also require constant monitoring and management to maintain their profitability. This is where Tox comes in, as it provides a secure and convenient way for operators to control their mining operations remotely.
Unfortunately, the emergence of using Tox as a messaging system is a worrying trend, as it highlights the growing sophistication of cybercriminals. It also underscores the need for organisations to be aware of the latest trends in cybercrime and to take steps to protect themselves accordingly.
Organisations should consider two-factor authentication and activity monitoring to help mitigate the risks posed by Tox-based attacks. They should also keep their antivirus software up to date and educate their employees on the dangers of downloading unauthorised software.
Happy
0 %
Sad
0 %
Excited
0 %
Sleepy
0 %
Angry
0 %
Surprise
0 %
0
0
