SoK: Cryptojacking Malware

Tekiner, Ege; Acar, Abbas; Uluagac, A. Selcuk; Kirda, Engin; Selçuk, Ali Aydın

doi:10.48550/arxiv.2103.03851

Cited by 2 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In addition, to the best of our knowledge, there is only one honeypot system for building automation systems. Considering the rapid increase of notorious ransomware attacks [164], cryptocurrency mining attacks [165], [166], and attacks to enterprise IoT systems [167]- [170], we believe that further research is needed which may enable us to protect smart buildings from ransomware attacks. We would like to note that building honeypots and honeynets for the unexplored IoT, IIoT and CPS applications may require realistic process models (e.g., patient vitals models, vehicle operation models, nuclear process models, etc.)…”

Section: B Open Issuesmentioning

confidence: 99%

A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and Cyber-Physical Systems

Franco¹,

Arış²,

Canberk³

et al. 2021

Preprint

Self Cite

View full text Add to dashboard Cite

The Internet of Things (IoT), the Industrial Internet of Things (IIoT), and Cyber-Physical Systems (CPS) have become essential for our daily lives in contexts such as our homes, buildings, cities, health, transportation, manufacturing, infrastructure, and agriculture. However, they have become popular targets of attacks, due to their inherent limitations which create vulnerabilities. Honeypots and honeynets can prove essential to understand and defend against attacks on IoT, IIoT, and CPS environments by attracting attackers and deceiving them into thinking that they have gained access to the real systems. Honeypots and honeynets can complement other security solutions (i.e., firewalls, Intrusion Detection Systems -IDS) to form a strong defense against malicious entities. This paper provides a comprehensive survey of the research that has been carried out on honeypots and honeynets for IoT, IIoT, and CPS. It provides a taxonomy and extensive analysis of the existing honeypots and honeynets, states key design factors for the state-of-the-art honeypot/honeynet research and outlines open issues for future honeypots and honeynets for IoT, IIoT, and CPS environments.

show abstract

Section: B Open Issuesmentioning

confidence: 99%

A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and Cyber-Physical Systems

Franco¹,

Arış²,

Canberk³

et al. 2021

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…There are three types of cryptojacking attacks. 1) In-browser Cryptojacking: runs with cryptojacking websites that contain hidden mining scripts [29]. 2) In-host Cryptojacking: runs on operating systems and disks (ROM) as malicious programs [29].…”

Section: Introductionmentioning

confidence: 99%

“…1) In-browser Cryptojacking: runs with cryptojacking websites that contain hidden mining scripts [29]. 2) In-host Cryptojacking: runs on operating systems and disks (ROM) as malicious programs [29]. 3) In-memory only Cryptojacking: that runs on memory (RAM) only with malicious scripts [30].…”

Section: Introductionmentioning

confidence: 99%

The Dangerous Combo: Fileless Malware and Cryptojacking

Varlioglu¹,

Elsayed²,

ElSayed³

et al. 2022

Preprint

View full text Add to dashboard Cite

Fileless malware and cryptojacking attacks have appeared independently as the new alarming threats in 2017. After 2020, fileless attacks have been devastating for victim organizations with low-observable characteristics. Also, the amount of unauthorized cryptocurrency mining has increased after 2019. Adversaries have started to merge these two different cyberattacks to gain more invisibility and profit under "Fileless Cryptojacking." This paper aims to provide a literature review in academic papers and industry reports for this new threat. Additionally, we present a new threat hunting-oriented DFIR approach with the best practices derived from field experience as well as the literature. Last, this paper reviews the fundamentals of the fileless threat that can also help ransomware researchers examine similar patterns.

show abstract

SoK: Cryptojacking Malware

Cited by 2 publications

References 0 publications

A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and Cyber-Physical Systems

A Survey of Honeypots and Honeynets for Internet of Things, Industrial Internet of Things, and Cyber-Physical Systems

The Dangerous Combo: Fileless Malware and Cryptojacking

Contact Info

Product

Resources

About