New XBash malware combines ransomware, coinminer, botnet, and worm features in deadly combo

New XBash malware strain targets both Linux and Windows servers
 
17th September, 2018 By Catalin Cimpanu
 
A new malware strain has been discovered in the wild that combines features from four types of malware categories --ransomware, coinminers, botnets, and worms-- to create a dangerous cocktail that has been wreaking havoc among Linux and Windows servers.
 
Named XBash, this new malware strain is the work of a well-known criminal group previously identified under the codenames of Iron [1, 2] and Rocke, and which has been extremely active in the past two years.
 
Iron has been tied to ransomware distribution campaigns, but also to a massive crypto-mining operation. Cisco Talos has called this group "the champion of Monero miners," and has hinted the group may be based in China.
 
Full Article.