Varonis Unveils the Norman Threat
On August 14, cybersecurity firm Varonis announced a new player in the cryptojacking arena, a virus they’ve slyly named “Norman.” This malware isn’t just an average Joe—its mission is to hijack unsuspecting computer users’ hardware to mine Monero (XMR), a cryptocurrency with a reputation for privacy.
What is Cryptojacking, and Why Should We Care?
So, what exactly is cryptojacking? It’s when hackers leverage the computing resources of other people’s machines to mine cryptocurrency without their knowledge. You see, while you’re browsing cat memes or streaming your favorite show, your computer could be unknowingly working harder than ever to line a criminal’s pockets! It’s like waking up to find out your best friend has been using your Netflix account to run a side business.
The Sneaky Tactics of Norman
Norman takes the cake when it comes to sneaky tactics. This malware is based on XMRig, a high-performance Monero miner. What’s particularly devious about Norman is that it’s set to play possum. If a user gets wise and opens Task Manager to investigate, Norman will shut down its mining operation quicker than you can say “technological sabotage!” But don’t celebrate just yet—once Task Manager is out of sight, Norman revives the mining process like a magician pulling a rabbit from a hat.
Behind the Code: A French Connection?
Varonis researchers dug deeper into Norman’s origins and surmised that its creator likely hails from a French-speaking area. Why? The evidence lies in the code itself, which features variables and functions in French. The researcher’s findings suggest that Norman’s creation involved a French version of WinRAR, evidenced by comments tucked away within the self-extracting archive. Now that’s a bit of a plot twist!
Not Just Cryptojacking: Malware Evolution
And if you think Norman is a one-off, think again. Another cybersecurity firm, Carbon Black, recently reported that a strain of XMR mining malware known as Smominru is stepping up its game. Not only does it mine cryptocurrency, but it’s also been caught stealing user data, which may well end up for sale on the dark web. As Carbon Black succinctly put it: “This discovery indicates a bigger trend … and will force a change in the way cybersecurity professionals classify, investigate, and protect themselves from threats.” Talk about a double whammy!
Conclusion: Staying One Step Ahead
The advent of Norman and its counterparts like Smominru highlight a troubling trend in cybersecurity. As crooks innovate new methods to either enrich themselves or steal personal data, it’s crucial to stay ever-vigilant. You might want to double-check your system’s defenses and ensure your malware protection is up to date—or you may just find yourself funding a digital pickpocket.
