Exploiting Cryptocurrency Miners with OISNT Techniques
DOI:
https://doi.org/10.14738/tnc.56.4083Abstract
Collection of intelligence is one of the key elements to organize more sophisticated methods of attacks. Open Source Intelligence (OSINT) is a technique used by attackers for reconnaissance purposes to gather information about specific targets. The accessibility to critical information about emerging systems through OSINT leads exposure of vulnerabilities and exploitation of these vulnerabilities to form widespread attack. Blockchain is one of the emerging technologies that exposed the use of crypto currencies such as Bitcoin and Ethereum. This research paper explains the use of OSINT to gather critical information about cryptocurrency miners such as Bitcoin Antminer and Ethereum Claymore and expose the vulnerabilities to exploit the configuration file of the miner manager. The research outcomes expose the vulnerability of the existing crypto currencies and use of OSINT for detection and analysis of cyber-threat in crypto currency market.
References
(1) Svein lnes, Jolien Ubacht, Marijn Janssen, Blockchain in government: Benefits and implications of distributed ledger technology for information sharing, In Government Information Quarterly, Volume 34, Issue 3, 2017, Pages 355-364, ISSN 0740-624X, https://doi.org/10.1016/j.giq.2017.09.007.
(2) Clare Sullivan, Eric Burger, E-residency and blockchain, In Computer Law & Security Review, Volume 33, Issue 4, 2017, Pages 470-481, ISSN 0267-3649, https://doi.org/10.1016/j.clsr.2017.03.016.
(3) Xiaoqi Li, Peng Jiang, Ting Chen, Xiapu Luo, Qiaoyan Wen, A survey on the security of blockchain systems, In Future Generation Computer Systems, 2017, , ISSN 0167-739X, https://doi.org/10.1016/j.future.2017.08.020.
(4) Nakamoto S: Bitcoin: A Peer-to-Peer Electronic Cash System. 2008.
(5) Due.com. (2017). How blockchain improves security and transaction times. Nasdaq. Retrieved from http://www.nasdaq.com/article/how-blockchain-improves-securityand-transaction-times-cm771339
(6) MIT News, Elizabeth Durant, Alison Trachy, Digital Diploma debuts at MIT Office of Undergraduate Education, October 17, 2017 http://news.mit.edu/2017/mit-debuts-secure-digital-diploma-using-bitcoin-blockchain-technology-1017
(7) TrendMicro, Kevin Y. Huang, Security 101: The Impact of Cryptocurrency-Mining Malware July 5, 2017, https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/security-101-the-impact-of-cryptocurrency-mining-malware
(8) Mauro Conti, Ali Dehghantanha, Katrin Franke, Steve Watson, Internet of Things security and forensics: Challenges and opportunities, In Future Generation Computer Systems, Volume 78, Part 2, 2018, Pages 544-546, ISSN 0167-739X, https://doi.org/10.1016/j.future.2017.07.060.
(9) News Week, Anthony Cuthbertson Bitcoin Botnet Aims to Makes Money From Smart Devices, December 4, 2017, http://www.newsweek.com/botnet-hacking-devices-mine-bitcoin-582404
(10) Steve Watson, Ali Dehghantanha, Digital forensics: the missing piece of the Internet of Things promise, In Computer Fraud & Security, Volume 2016, Issue 6, 2016, Pages 5-8, ISSN 1361-3723, https://doi.org/10.1016/S1361-3723(15)30045-2.
(11) Business Insider, UK, Rob Price, One of the world's biggest bitcoin exchanges has been hacked, July 5, 2017, http://uk.businessinsider.com/south-korean-bitcoin-exchange-bithumb-hacked-ethereum-2017-7
(12) The Guardian, Samuel Gibbs, Bitcoin worth $78m stolen from Bitfinex exchange in Hong Kong August 3, 2016, https://www.theguardian.com/technology/2016/aug/03/bitcoin-stolen-bitfinex-exchange-hong-kong
(13) CoinDesk, Charles Bovaird, Bitcoin Drops Nearly 20% as Exchange Hack Amplifies Price Decline, August 2, 2016, https://www.coindesk.com/bitcoin-drops-12-exchange-hack-amplifies-price-decline/
(14) Christian Decker and Roger Wattenhofer (2014) Bitcoin Transaction Malleability and MtGox, Computer Science, Cryptography and Security, https://doi.org/10.1007/978-3-319-11212-1_18
(15) CNBC International, Luke Graham $32 million worth of digital currency ether stolen by hackers, Cybersecurity, July 20, 2017, https://www.cnbc.com/2017/07/20/32-million-worth-of-digital-currency-ether-stolen-by-hackers.html
(16) M. Banerjee, J. Lee, K.-K.R. Choo, A blockchain future to Internet of Things security: A position paper, Digital Communications and Networks (2017), http://dx.doi.org/10.1016/j.dcan.2017.10.006.
(17) D. Quick, K.-K.R. Choo, Digital forensic intelligence: Data subsets and Open Source Intelligence (DFINT+OSINT): A timely and cohesive mix, Future Generation Computer Systems (2016), http://dx.doi.org/10.1016/j.future.2016.12.032
(18) IDC. The Digital Universe of Opportunities. Rich Data and Increasing Value of The Internet of Things. EMC Corporation; 2014 [updated, 2014; cited 2016 1 June]; Available from: http://www.emc.com/leadership/digital-universe/2014view/executive-summary.htm.
(19) Bitmain AntMiner, Bitcoin Antminer S9-13.5TH/s https://shop.bitmain.com/productDetail.htm?pid=00020171110160546640l4g92i60062E
(20) Claymore's Dual Ethereum AMD GPU Miner v10.0 (Windows/Linux) https://github.com/nanopool/Claymore-Dual-Miner/releases
(21) Netcat, The Nmap project. https://nmap.org/ncat/
(22) Alzubi, A., Sari, A., (2016) Deployment of Elliptic Curve Cryptography (ECC) to Enhance Message Integrity in Wireless Body Area Network. International Journal of Computer Science and Information Security, Vol.14, No.11, pp.1146-1153, ISSN:1947-5500.
(23) Alzubi, A. and Sari, A. (2016) Deployment of Hash Function to Enhance Message Integrity in Wireless Body Area Network (WBAN). Int. J. Communications, Network and System Sciences, Vol.9,No.12, pp. 613-621. http://dx.doi.org/10.4236/ijcns.2016.912047
(24) Sari, A., Rahnama, B., Eweoya, I., Agdelen, Z. (2016) Energizing the Advanced Encryption Standard (AES) for Better Performance. International Journal of Scientific & Engineering Research, Vol.7, No.4, pp.992-1000, ISSN 2229-5518.
(25) Rahnama, B., Sari, A., & Ghafour, M. Y. (2016). Countering RSA Vulnerabilities and Its Replacement by ECC: Elliptic Curve Cryptographic Scheme for Key Generation. In D. G., M. Singh, & M. Jayanthi (Eds.) Network Security Attacks and Countermeasures (pp. 270-312). Hershey, PA: Information Science Reference. doi:10.4018/978-1-4666-8761-5.ch012
(26) Sari, A. and Karay, M. (2015) Reactive Data Security Approach and Review of Data Security Techniques in Wireless Networks. Int. J. Communications, Network and System Sciences, Vol.8, No.13, pp. 567-577. Doi: http://dx.doi.org/10.4236/ijcns.2015.813051.
(27) Sari, A. and Karay, M. (2015) Comparative Analysis of Wireless Security Protocols: WEP vs WPA. International Journal of Communications, Network and System Sciences, Vol. 8, No.12, pp. 483-491. doi: http://10.4236/ijcns.2015.812043.
(28) Sari, A., Onursal, O. and Akkaya, M. (2015) Review of the Security Issues in Vehicular Ad Hoc Net-works (VANET). Int. J. Communications, Network and System Sciences, Vol. 8, No.13, pp. 552-566. http://dx.doi.org /10.4236/ijcns.2015.813050 .
(29) Cambazoglu, ?. and Sari, A. (2015) Collision Avoidance in Mobile Wireless Ad-Hoc Networks with Enhanced MACAW Protocol Suite. Int. J. Communications, Network and System Sciences, Vol.8, No.13, pp. 533-542. http://dx.doi.org/10.4236/ijcns.2015.813048.
(30) Kirencigil, B.Z., Yilmaz, O., Sari, A., (2016) Unified 3-tier Security Mechanism to Enhance Data Security in Mobile Wireless Networks. International Journal of Scientific & Engineering Research, Vol.7, No.4, pp. 1001-1011, ISSN 2229-5518.
(31) Sari, A. (2015) Two-Tier Hierarchical Cluster Based Topology in Wireless Sensor Networks for Contention Based Protocol Suite. International Journal of Communications", Network and System Sciences, Vol.8, No.3, pp. 29-42. doi: http://dx.doi.org/10.4236/ijcns.2015.83004.
(32) Yilmaz, O., Kirencigil, B.Z., Sari, A., (2016) VAN Based theoretical EDI Framework to enhance organizational data security for B2B transactions and comparison of B2B cryptographic application models.International Journal of Scientific & Engineering Research, Vol.7, No.4, pp. 1012-1020, ISSN 2229-5518.
(33) Sari, A., (2015), Security Issues in Mobile Wireless Ad Hoc Networks: A Comparative Survey of Methods and Techniques to Provide Security in Wireless Ad Hoc Networks, New Threats and Countermeasures in Digital Crime and Cyber Terrorism, (pp. 66-94). Hershey, PA: IGI Global. doi:10.4018/978-1-4666-8345-7. April 2015.
(34) Sari, A. (2015) Lightweight Robust Forwarding Scheme for Multi-Hop Wireless Networks. International Journal of Communications, Network and System Sciences, Vol. 8, No.3, pp. 19-28. doi: http://dx.doi.org/10.4236/ijcns.2015.83003.
(35) Sari, A. and Akkaya, M. (2015) Fault Tolerance Mechanisms in Distributed Systems. International Journal of Communications, Network and System Sciences, Vol.8, No.12, pp. 471-482. doi: http://10.4236/ijcns.2015.812042.
(36) Sari, A. (2015) A Review of Anomaly Detection Systems in Cloud Networks and Survey of Cloud Security Measures in Cloud Storage Applications. Journal of Information Security, Vol.6, No.2, pp. 142-154. doi: http://dx.doi.org/10.4236/jis.2015.62015.
(37) Sari, A. (2014); Security Approaches in IEEE 802.11 MANET Performance Evaluation of USM and RAS, International Journal of Communications, Network, and System Sciences, Vol.7, No.9, pp. 365-372, ISSN: 1913-3723; ISSN-P: 1913-3715, DOI: http://dx.doi.org/10.4236/ijcns.2014.79038.
(38) Rahnama, B.; Sari, A.; Makvandi, R., "Countering PCIe Gen. 3 data transfer rate imperfection using serial data interconnect," Technological Advances in Electrical, Electronics and Computer Engineering (TAEECE), 2013 International Conference on , vol., no., pp.579,582, 9-11 May 2013 doi: http://doi.acm.org/10.1109/TAEECE.2013.6557339.
(39) Sari, A.; Rahnama, B., (2013) "Simulation of 802.11 Physical Layer Attacks in MANET," Computational Intelligence, Communication Systems and Networks (CICSyN), 2013 Fifth International Conference on , vol., no., pp.334,337, 5-7 June 2013, http://dx.doi.org/10.1109/CICSYN.2013.79 .
(40) Sari, A., Rahnama, B (2013). Addressing security challenges in WiMAX environment. In Proceedings of the 6th International Conference on Security of Information and Networks (SIN '13). ACM, New York, NY, USA, 454-456. DOI=10.1145/2523514.2523586 http://doi.acm.org/10.1145/2523514.2523586
(41) Sari, A. (2014); Security Issues in RFID Middleware Systems: A Case of Network Layer Attacks: Proposed EPC Implementation for Network Layer Attacks, Transactions on Networks & Communications, Society for Science and Education, United Kingdom, Vol.2, No.5, pp. 1-6, ISSN: 2054-7420, DOI: http://dx.doi.org/10.14738/tnc.25.431.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2017 Transactions on Networks and Communications
This work is licensed under a Creative Commons Attribution 4.0 International License.
