Common Information
Type Value
Value
ADB.miner
Category Tool
Type Botnet
Misp Type Cluster
Description A new botnet appeared over the weekend, and it's targeting Android devices by scanning for open debug ports so it can infect victims with malware that mines the Monero cryptocurrency. The botnet came to life on Saturday, February 3, and is targeting port 5555, which on devices running the Android OS is the port used by the operating system's native Android Debug Bridge (ADB), a debugging interface that grants access to some of the operating system's most sensitive features. Only devices running the Android OS have been infected until now, such as smartphones, smart TVs, and TV top boxes, according to security researchers from Qihoo 360's Network Security Research Lab [Netlab] division, the ones who discovered the botnet, which the named ADB.miner.
Details Published Attributes CTI Title
Details Website 2020-10-15 18 Cryptocurrency mining botnets on the rise | Infosec Resources
Details Website 2018-10-15 115 January – September 2018 Cyber Attack Statistics
Details Website 2018-09-14 46 Fbot, A Satori Related Botnet Using Block-chain DNS System
Details Website 2018-02-05 0 Android Devices Targeted by New Monero-Mining Botnet
Details Website 2018-02-04 2 Early Warning: ADB.Miner A Mining Botnet Utilizing Android ADB Is Now Rapidly Spreading
Details Website 2018-02-04 2 ADB.Miner:恶意代码正在利用开放了ADB 接口的安卓设备挖矿