Blog

Security Research

Cryptominers’ Anatomy: Analyzing Cryptominers

Maor Dahan is a Senior Security Researcher at Akamai with more than a decade of experience in the cybersecurity industry. He specializes in operating system internals, vulnerability research, and malware analysis. Maor also has extensive experience designing and developing advanced detection and prevention mechanisms for innovative security products such as EDR, EPP, and virtualization-based security.

In the following case studies, we will cover some of the cryptominer samples we identified in the wild.

\r\n \r\n Executive summary

\r\n Monero network analysis \r\n Network discovery

\r\n Cross-referencing cryptominers to the network

\r\n \r\n

\r\n Analyzing cryptominer samples \r\n Case study #1: A persistent and massive campaign

\r\n Case study #2: Public pool topology used by a Zephyr cryptominer

\r\n Case study #3: Cryptominer using a mining proxy topology

\r\n Case study #4: Concealed blockchain communication using a Stratum…