StripedFly: Perennially flying under the radar

Introduction

It’s just another cryptocurrency miner… Nobody would even suspect the mining malware was merely a mask, masquerading behind an intricate modular framework that supports both Linux and Windows. It comes equipped with a built-in TOR network tunnel for communication with command servers, along with update and delivery functionality through trusted services such as GitLab, GitHub, and Bitbucket, all using custom encrypted archives. The amount of effort that went into creating the framework is truly remarkable, and its disclosure was …

command communication cryptocurrency cryptocurrency miner delivery framework introduction linux malware miner mining modular network radar servers services tor tor network tunnel under under the radar update windows