8

Is the threat of Botnets using massive amounts of CPUs/GPUs to mine Bitcoin, or some CPU-friendly coin, purely theoretical at this point? Or have there been reports of this actually happening?

I know of trojans stealing Bitcoin wallets, this is not related to my question.

Improve this question
1
  • 1
    This article from Symantec might interest you. They try to calculate the profitability of such botnets. With the current difficulty and price, I highly doubt that bitcoin mining is an appealing activity to botnet owners.
    – nmat
    Oct 9, 2011 at 23:37

3 Answers 3

Reset to default
8

First report about mining botnet was made at the end of June, and it evolved rapidly from CPU to GPU mining. But there is no consensus about what kind of harm it will do to Bitcoin, because from the bitcoin network point of view, infected computers run legitimate mining that supports network operation.

  • 17 Jun 2011 - Symantec suggested that it would be profitable to run CPU mining botnet.
  • 28 Jun 2011 - Kaspersky Lab's expert Alex Gostev made first report about simple CPU mining botnet found in the wild.
  • 2 Aug 2011 - F-Secure reported about discovery of advanced CPU mining botnet controlled via twitter.
  • 11 Aug 2011 - Symantec discovered first GPU mining botnet called Trojan.Badminer.
Improve this answer
5

There were a number of news articles in September 2011 about the rootkit TDL4 using the Ufasoft GPU miner to mine bitcoins. A few links:

Quotes below are from the article in the Inquirer:

SECURITY RESEARCHERS at Russian antivirus vendor Kaspersky Lab warn that TDSS, one of the most dangerous and widespread family of rootkits, recently received an update that forces infected computers to mine Bitcoins.

TDSS rootkits have consistently grown in sophistication since first appearing in 2008. The latest version known as TDL4 installs itself in the master boot record (MBR) and is capable of infecting all Windows versions, including 64-bit Windows Vista and Windows 7, which require signed device drivers.

[...]

It turns out that the variant had been configured to execute a component called conhost.exe with special parameters. Further investigation revealed that conhost.exe was a copy of the Ufasoft GPU Bitcoin miner application.

Improve this answer
1
  • I think it should be noted that whoever tries to reclaim Bitcoins generated by a discovered botnet is pretty much putting themselves in the line of fire. As Bitcoins aren't truly anonymous, it would be be a bit hard, but most people would love to catch whoever it was that did it.
    – Evil Spork
    Oct 9, 2011 at 17:59
-1

It has been happening for months. In fact botnet software is now smart enough to identify the best option to mine on and use that - cpu or gpu.

Improve this answer
2
  • 3
    Citation required.
    – ripper234
    Oct 9, 2011 at 7:41
  • Unsupported claim.
    – DeathAndTaxes
    Oct 14, 2011 at 20:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.