Smominru Malware Affecting 4,700 Computers Every Day, Researchers Claim

China, Taiwan, Russia, Brazil, and the US have seen the most attacks.

Advertisement
By Indo-Asian News Service | Updated: 8 October 2019 10:59 IST
Smominru Malware Affecting 4,700 Computers Every Day, Researchers Claim

Security researchers have discovered that the Smominru malware infected 90,000 machines worldwide during the month of August, with an infection rate of up to 4,700 computers per day. In its post-infection phase, it steals victim credentials, installs a Trojan module and a cryptominer and propagates inside the network, according to researchers from Guardicore, a data centre and cloud security company.

The botnet uses several methods to propagate, but primarily it infects a system in one of two ways -- either by brute-forcing weak credentials for different Windows services, or more commonly by relying on the infamous EternalBlue exploit, cyber-security firm Kaspersky said in a blog post last week.

Even though Microsoft patched the vulnerability EternalBlue exploits, which made the WannaCry and NotPetya outbreaks possible, many companies are simply ignoring updates, Kaspersky said.

China, Taiwan, Russia, Brazil, and the US have seen the most attacks, but that doesn't mean other countries are out of its scope. For example, the largest network Smominru targeted was in Italy, with 65 hosts infected.

Advertisement

The criminals involved are not too particular about their targets, which range from universities to healthcare providers.

However, one detail is very consistent. About 85 percent of infections occur on Windows 7 and Windows Server 2008 systems. The rest include Windows Server 2012, Windows XP and Windows Server 2003.

Advertisement

After compromising the system, Smominru creates a new user, called admin$, with admin privileges on the system and starts to download a whole bunch of malicious payloads.

The most obvious objective is to silently use infected computers for mining cryptocurrency (namely, Monero) at the victim's expense.

Advertisement

The malware also downloads a set of modules used for spying, data exfiltration, and credential theft.

On top of that, once Smominru gains a foothold, it tries to propagate further within the network to infect as many systems as possible.

To protect their network, computers, and data from Smominru, users need to update operating systems and other software regularly, Kaspersky said.

It is also important for users to use strong passwords. A reliable password manager that helps you create, manage, and automatically retrieve and enter passwords may help protect you against brute-force attacks.

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: Smominru, Kaspersky
Advertisement
Popular Mobile Brands
  1. Realme Narzo 80 Lite 5G Launched in India With 6,000mAh Battery: See Price
  2. Vivo Y400 Pro 5G India Launch Date Confirmed; Design Revealed
  3. Boat SmartRing Active Plus Launched in India: Check Price, Features
  4. Oppo K13x 5G India Launch Date, Price Range, Key Features Revealed
  5. Samsung Galaxy Z Fold 7, Galaxy Z Flip 7 May Get Big Gemini Live Upgrades
  1. Oppo K13x 5G India Launch Date Set for June 23; Price Range, Key Features Revealed
  2. Google Tests AI-Powered Audio Overviews in Search Results for Certain Queries
  3. Boat SmartRing Active Plus With SpO2 Monitoring, Heart Rate Tracking Launched in India
  4. Axiom-4 Mission Launch Carrying Indian Astronaut Shubhanshu Shukla Set for June 19
  5. Apple to Release First Public Beta Update for AirPods 4 and AirPods Pro (2nd Generation) in July
  6. Google Adds New Features to Gemini Code Assist, Integrates Gemini 2.5 Pro Capabilities
  7. Google Pixel 10 Could Debut With Magic Cue AI Feature That Suggests Actions Based on App Usage
  8. ROG Xbox Ally Pre-Orders to Reportedly Begin in August; European Pricing Tipped
  9. Realme Narzo 80 Lite 5G With 6,000mAh Battery Launched in India: Price, Specifications
  10. Google Pixel 10 Series Said to Offer Improved Audio With Upgraded Speakers
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.