The researchers said that attackers will send large-scale spam emails with the topic of Recommendation shares to stimulate the interest of target users. This type of spam pattern used by attackers has been converted into "pump-and-dump" by researchers. In the financial sector, the term "pull up shipping" or "sit down ". That is to say, spam senders will buy shares when their share prices are low, and then when spam activity (with the Recommendation stock as the subject) raises the share price, they sell at a high price and earn the price difference, which is called "pump-and-dump ".
Necurs started pushing encrypted currenciesResearchers believe that the Necurs spam botnet may be composed of millions of zombie hosts, in addition, this botnet has been conducting "pump-and-dump" activities over the years, which is also the main business of Necurs. But in addition, Necurs will spread Dridex bank Trojans and several other ransomware, but this is a sideline.
But starting this week, some researchers discovered that Necurs had changed the previous sales style of cheap stocks and began to promote cryptocurrency. It is also known that this is the first time Necurs has promoted cryptocurrency through its own big spam network.
Necurs and SwisscoinAccording to previous reports, Swisscoin, A cryptocurrency, is considered a bypass scam and has recently been suspended. However, in January 15, 2018, this encrypted currency resumed normal transactions, and this day was also the day when the Necurs spam activity (with the topic of Swisscoin) began. More importantly, since the spam activity, the price of Swisscoin has shrunk by 40% compared with the initial transaction price.
At present, the researchers are not clear about the impact of Necurs on Swisscoin transaction prices, and similar malicious activities have not been compared before. In addition, the decline in bitcoin prices may also affect the price of Swisscoin.
For more information about Swisscoin, refer to [here ].
According to the latest research reports of ConradLongmore, VirusBulletin and MyOnlineSecurity, the content of the spam sent by the Necurs Botnet is as follows:
This crypto coin could go up fifty thousand percent this year
Let me tell you about one crypto currency that could turn 1000 bucks into 1 million
Forget about bitcoin, there’s a way better coin you can buy.
This cryptocurrency is estimated to increase by 500 times this year, so Swiss currency can help you change $1000 to $1 million. Forget bitcoin, Because Bitcoin is your better choice.
It is understood that the Necurs botnet will "take a break" between February and February of the next year, and then celebrate the New Year through a new type of spam activity. From this point of view, the Necurs botnet will give you a New Year's gift for 2018...
Reference Source: bleepingcomputer