Dexphot's main purpose was to silently mine cryptocurrency and generate revenue for the attackers.
Microsoft security engineers detailed today a new malware strain that has been infecting Windows computers since October 2018 to hijack their resources to mine cryptocurrency and generate revenue for the attackers. Named Dexphot, this malware reached its peak in mid-June this year, when its botnet reached almost 80,000 infected computers.
Since then, the number of daily infections has been slowly going down, as Microsoft claims it deployed countermeasures to improve detections and stop attacks.
A complex malware strain for a mundane task
But while Doxphot's end goal was banal, the methods and techniques for its modus operandi stood out due to their high level of complexity, something that Microsoft also noticed.
... ...
