Botnet of Over 100K Devices Used to DDoS Electrum Servers

[silversurfer]

The malicious actors behind the DDoS attacks against Electrum Bitcoin wallet users have switched to a new malware loader for their botnet Trojan, after previously using the Smoke Loader tool and the RIG exploit kit.
 
Since the attacks targeting Electrum's infrastructure have begun, Malwarebytes Labs' research team estimates that "the amount of stolen funds has increased to USD $4.6 million."

In addition, the botnet used to launch the DDoS attacks has reached a maximum of 152,000 compromised machines, with a plateau of 100,000 according to a public online tracker monitoring clients attacking electrumx servers.
 
The ElectrumDoSMiner Trojan used to flood the Electrum nodes with requests is now disseminated with a not yet documented malware loader dubbed BeamWinHTTP by the Malwarebytes Labs' researchers​​​​​​.​​​​
 
As explained by Malwarebytes, "Users of affected computers may experience slowdowns in internet speed as they are joined to a botnet that performs DDoS attacks."

SOURCE: https://www.bleepingcomputer.com/news/se...m-servers/