Close Menu
  • Crypto News
  • Markets
  • Bitcoin
  • Ethereum
  • XRP
  • Altcoins
  • Technology
  • More
    • Crypto Prices – Latest from BTC, ETH & XRP
    • NFT
    • DeFi

Subscribe to Updates

Get the latest crypto news and updates directly to your inbox.

Trending

Coinbase Adds Support for Pump.Fun Ahead of $PUMP Token ICO

July 11, 2025

Dogecoin (DOGE) Rockets to $0.20 — Can It Go Even Higher?

July 11, 2025

PEPESCAPE Launches Crypto Presale, Combining Memecoin Culture with Decentralized Finance Ecosystem

July 11, 2025

Bitcoin to Hit $0.5k? Samson Mow Clashes with LTC Founder Charlie Lee

July 11, 2025

If You Bought Ethereum When Eric Trump Said So, You’re Finally in the Green

July 11, 2025
Facebook X (Twitter) Instagram
  • Advertise
en English
nl Nederlandsen Englishfr Françaisde Deutschit Italianoru Русскийes Españolzh-CN 简体中文hi हिन्दीja 日本語
Crypto Observer
  • Crypto News

    Dogecoin (DOGE) Rockets to $0.20 — Can It Go Even Higher?

    July 11, 2025

    PEPESCAPE Launches Crypto Presale, Combining Memecoin Culture with Decentralized Finance Ecosystem

    July 11, 2025

    XRP Price Builds Momentum — $2.50 Break Sparks Fresh Bullish Wave

    July 11, 2025

    Rare Flip: Ethereum’s $62.1B Futures Volume Tops Bitcoin’s $61.7B

    July 11, 2025

    Ethereum Price Spikes To $3K — Breakout Confirms Bullish Trend

    July 11, 2025
  • Markets
  • Bitcoin
  • Ethereum
  • XRP
  • Altcoins
  • Technology
  • More
    • Crypto Prices – Latest from BTC, ETH & XRP
    • NFT
    • DeFi
Facebook X (Twitter) Instagram
Crypto Observer
Home » Technology » Blockchain » Cryptojacking Group Hacks Hundreds Of Devices To Mine Crypto
Blockchain

Cryptojacking Group Hacks Hundreds Of Devices To Mine Crypto

Crypto Observer StaffBy Crypto Observer StaffJune 11, 2025No Comments3 Mins Read
Facebook Twitter Pinterest Reddit Telegram Email LinkedIn Tumblr
Cryptojacking Group Hacks Hundreds Of Devices To Mine Crypto
Share
Facebook Twitter LinkedIn Pinterest Email

The Librarian Ghouls hacker group has compromised hundreds of Russian devices and used them to mine crypto in an apparent case of cryptojacking, cybersecurity firm Kaspersky says.

The hacker group, which is also known as Rare Werewolf, gains access to systems through malware-ridden phishing emails disguised as messages from legitimate organizations that appear to be official documents or payment orders, Kaspersky said in a report on Monday.

Bad actors can gain access to devices to steal resources such as computing power and mine crypto. Source: Cointelegraph

Hackers scope out device info before mining

After a computer is infected with the malware, the hackers establish a remote connection and disable security systems such as Windows Defender.

The infected device is also programmed to turn on at 1 am and shut down at 5 am, with the hackers using the time frame to further establish unauthorized remote access and steal login credentials.

“It is our assessment that the attackers use this technique to cover their tracks so that the user remains unaware that their device has been hijacked,” Kaspersky said.

They then steal login credentials and also collect information about the device’s available RAM, CPU cores and GPUs to optimally configure the crypto miner before deploying it.

While the miner is running, the hackers maintain a connection to the mining pool, sending a request every 60 seconds, according to Kaspersky.

“We observe that the attackers are continuously refining their tactics, encompassing not only data exfiltration but also the deployment of remote access tools and the use of phishing sites for email account compromise,” the firm said.

Cryptojacking campaign ongoing since 2024

So far, the hacking campaign, which started in December and is ongoing, has affected hundreds of Russian users, particularly industrial enterprises and engineering schools, with additional victims reported in Belarus and Kazakhstan.

The origin of the group hasn’t been established; however, Kaspersky said the phishing emails are “composed in Russian and include archives with Russian filenames, along with Russian-language decoy documents.”

Related: Ukraine arrests man for breaching hosting accounts to mine crypto

“This suggests that the primary targets of this campaign are likely based in Russia or speak Russian,” Kaspersky said.

Librarian Ghouls could be hacktivists

Kaspersky speculates that the Librarian Ghouls might be hacktivists, who use hacking as a form of civil disobedience to promote a political agenda, due to the use of techniques commonly associated with similar groups, such as reliance on legitimate, third-party software.

“A distinctive feature of this threat is that the attackers favor using legitimate third-party software over developing their own malicious binaries,” Kaspersky said.

It’s unknown how long the group has been active, but another Russian cybersecurity firm, BI. ZONE said in a Nov. 23 report that Rare Werewolf has been around since at least 2019. 

Magazine: Coinbase hack shows the law probably won’t protect you: Here’s why

Read the full article here

Crypto News cryptocurrency
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

Crypto scammer resentenced to 12 years for not paying victim

Crypto scammer resentenced to 12 years for not paying victim

July 10, 2025
Trump’s Crypto Agenda Is Rigged For The Rich

Trump’s Crypto Agenda Is Rigged For The Rich

July 10, 2025
Gates Inc. and Oasys Plan Global Expansion after Tokyo Real Estate Tokenization

Gates Inc. and Oasys Plan Global Expansion after Tokyo Real Estate Tokenization

July 10, 2025
US Government Pushing Stablecoins to Boost US Dollar: Sygnum

US Government Pushing Stablecoins to Boost US Dollar: Sygnum

July 10, 2025
Add A Comment

Leave A Reply Cancel Reply

Subscribe to Updates

Get the latest crypto news and updates directly to your inbox.

Top Posts

Coinbase Adds Support for Pump.Fun Ahead of $PUMP Token ICO

July 11, 2025

Dogecoin (DOGE) Rockets to $0.20 — Can It Go Even Higher?

July 11, 2025

PEPESCAPE Launches Crypto Presale, Combining Memecoin Culture with Decentralized Finance Ecosystem

July 11, 2025
Advertisement
Demo

Crypto Observer is your one-stop website for the latest crypto news and updates, follow us now to get the news that matters to you.

Facebook X (Twitter) Instagram
Crypto News

PEPESCAPE Launches Crypto Presale, Combining Memecoin Culture with Decentralized Finance Ecosystem

July 11, 2025

XRP Price Builds Momentum — $2.50 Break Sparks Fresh Bullish Wave

July 11, 2025

Rare Flip: Ethereum’s $62.1B Futures Volume Tops Bitcoin’s $61.7B

July 11, 2025
Get Informed

Subscribe to Updates

Get the latest crypto news and updates directly to your inbox.

Facebook X (Twitter)
  • Privacy Policy
  • Terms of use
  • Advertise with us | Publishing
  • Contact us
  • Crypto News – Press release
  • Newsletter sign up
  • Markets
  • Altcoins
  • Bitcoin
  • Crypto News
  • DeFi
  • Ethereum
  • Technology
  • Blockchain
  • AI
  • NFT
  • Thanks for joining us
© 2025 Crypto Observer. All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.