S0492 CookieMiner

malwareEnterprise

platformsmacOS

also known asCookieMiner

CookieMiner is mac-based malware that targets information associated with cryptocurrency exchanges as well as enabling cryptocurrency mining on the victim system itself. It was first discovered in the wild in 2019.

techniques used (14)

ATT&CK techniques this enables or maps to.

T1005Data from Local System
T1027.010Command Obfuscation
T1048.003Exfiltration Over Unencrypted Non-C2 Protocol
T1059.004Unix Shell
T1059.006Python
T1083File and Directory Discovery
T1105Ingress Tool Transfer
T1140Deobfuscate/Decode Files or Information
T1496.001Compute Hijacking
T1518.001Security Software Discovery
T1539Steal Web Session Cookie
T1543.001Launch Agent
T1555.003Credentials from Web Browsers
T1686Disable or Modify System Firewall

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan