Windows Servers (2003) Targeted for Cryptocurrency Mining via IIS 6.0 Flaw

[Vaught]

https://www.bleepingcomputer.com/news/security/windows-servers-targeted-for-cryptocurrency-mining-via-iis-flaw/

Microsoft initially said it was not planning to fix the flaw because IIS 6.0 was end-of-life, and so were the operating systems that shipped with IIS 6.0 by default —Windows XP and Windows Server 2003.

But the vulnerability shared some common traits with the EXPLODINGCAN NSA exploit leaked in April 2017 by the Shadow Brokers, and it eventually received a fix in mid-June 2017.

These are also not the first crooks to mine Electroneum instead of Monero, the cryptocurrency of choice for all recent illegal mining campaigns.

It's stated that, while Win XP and Windows Server 2003 is not as widespread, these attacks are growing in number. And yes, another one for the bitcoin craze turning into a criminal venture

[Tones3D]

Why does the electroneum coin image look like the franklin badge from earthbound?

[Vaught]

Based on their "badge" design.

https://s2.coinmarketcap.com/static/img/coins/200x200/2137.png

Doesn't help it actually has some similarities

[chipsnapper]

cue MS updating XP for the fourth time after the 2014 cutoff

[Sims_doc]

I can imagine why they would do this given that servers usually have decent hardware depending on it's use, compared to javascript mining which just using the home computer from 2005.

[fruxodaily]

If you're running either server 2003 or XP in 2018 you deserve it

[BiN4RY]

Lots of commercial applications needs it for legacy reasons. It's not always the case with some user refusing to upgrade

[TerminatorsUncle]

@Vaught your avatar/background convey my feelings perfectly