Botnet abuses Docker servers and crypto blockchain to deliver Doki backdoor

… that distributes a “fully undetectable” malicious backdoor that abuses the Dogecoin cryptocurrency blockchain for dynamic C2 domain generation.

As user organizations move more of their business infrastructure off premises, cybercriminals become increasingly motivated to target Linux-based cloud environments, including Docker servers with misconfigured API ports.

And while cryptojacking schemes comprise some of the more conventional varieties of these Linux-based malware attacks, researchers have just disclosed the discovery of a Docker container attack that distributes a “fully undetectable” malicious backdoor that abuses the Dogecoin cryptocurrency blockchain for dynamic C2 domain generation.

Dubbed Doki, the backdoor is designed to execute malicious code sent by adversaries, and has secretly been in existence for more than six months already, according to researchers from Intezer, who described their findings in a blog post today.

Doki establishes C2 communication by querying the “dogechain.info API, a cryptocurrency block explorer for Dogecoin, for the value that was sent out (spent) from a hardcoded wallet address that is controlled by the attacker.” That value is then hashed and converted to a subdomain that is appended to ddns.net in order to create a random C2 address.

“Using this technique, the attacker controls which address the malware will contact by transferring a specific amount of Dogecoin from his or her wallet. Since only the attacker has control over the wallet, only he can control when and how much dogecoin to transfer, and thus switch the domain accordingly,” Intezer explains, noting that the blockchain technique also helps prevent law enforcement takedowns and thwarts domain filtering.

The report says the campaign is the work of the actors behind the Ngrok botnet, who is more typically known to infect victims with cryptominers.

“Our evidence shows that it takes only a few hours from when a new misconfigured Docker server is up online to become infected by this campaign,” the report continues.

The botnet attackers exploit their victims by scanning for misconfigured, openly accessible Docker API ports, and then establish their own malware-serving containers on the host. The malicious containers are based on abused images that are available through Docker hub.

“The advantage of using a publicly available image is the attacker doesn’t need to hide it on Docker hub or other hosting solutions. Instead, the attackers can use an existing image and run their own logic and malware on top of it,” the report explains.

The scheme also abuses Ngrok — a service that uses encrypted tunneling to private local servers to the public internet — “to craft unique URLs with a short lifetime,” and then uses those URLs to download payloads such as Doki “by passing them to the curl based image,” Intezer explains.

Earlier this month, researchers from Aqua Security reported that attackers have been performing a new container attack technique in the wild, whereby they build their own malicious images on a targeted host instead of pulling preexisting ones from a public registry. This maneuver allows the adversaries to avoid static detection by scanners that are programmed to look for suspicious images.

Related Posts:

  • No Related Posts

The Entire DeFi Sector Is Worth Less Than “Top” Cryptocurrencies, but for How Long?

In a tweet shared on July 28, 2020, Ray says DeFi forms an incredibly small part of the total cryptocurrency market. Coincidentally, the traditional …
Reading Time: 2minutesbyDalmas NgetichonJuly 29, 2020&nbspAltcoins

DeFi is “forcing” everyone back to farming. With above-average yields, Ryan Watkins, a researcher at Messari, opines that regardless of the recent re-rating and DeFi’s total valuation more than tripling in three years, the sub-sector is at nascence.

DeFi is at Nascence Despite its Popularity

In a tweet shared on July 28, 2020, Ray says DeFi forms an incredibly small part of the total cryptocurrency market. Coincidentally, the traditional market is yet to “credit crypto’s capital assets like they have crypto’s non-sovereign store of value.” This is an opportunity for savvy investors.

The entirety of what we call DeFi is worth less than both XRP and Bitcoin Cash alone.

Despite its rerating over the past couple months, DeFi is still extremely small in perspective.

1/ pic.twitter.com/rd4LZbDeu6

— Ryan Watkins (@RyanWatkins_) July 28, 2020

At the time of writing, there are over $3.7 billion worth of ether (ETH) locked in DeFi dApps according to Defi Pulse. Maker is the most dominant. Compound is second, dropping down the leaderboard less than a month after launching the COMP Liquidity Mining Program.

Regardless, the total value locked on DeFi platform can’t be compared to spot valuations of mainstream base chains like Ripple (XRP), or even Bitcoin Cash (BCH)–an offshoot of Bitcoin.

Boasting of decent market caps of $10.5 billion and $5.3 billion, respectively, the top 10 projects are relatively more liquid.

Dogecoin Is Valued More Than Most DeFi Platform

According to a Messari compilation, at present valuation, DeFi is considerably less valuable than top Layer-1 blockchain projects.

In their assessment, DeFi projects are cumulatively worth $45.7 billion based on July 23 spot rates. This translates to a 1.5 percent of the total crypto market cap.

But it gets more baffling.

Only Maker (MKR)–with a market cap of $510 million, is more valuable than Dogecoin, a jest meme coin.

More importantly, though, most DeFi projects have a working product complete with functional utility tokens. They are not vaporware unlike most ICO scams of 2017.

From Defi Pulse, lending at RAY—a platform which launched in September 2019, for instance, attracts a 1.65 percent interest. Besides, since DeFi dApps generate cash flows, time-tested valuation techniques are applicable.

DeFi versus Staking

While DeFi could further explode, further straining the Ethereum’s base layer, the growth of Proof-of-Stake platforms may challenge its dominance.

Already, Staking APRs-in some instances, are higher than DeFi lending rates. This is attractive for yield farmers, actively searching to park their assets and passively “harvest” profits.

A Xangle report revealed that Ethereum’s network activity in 2020 is at fever-pitch, nearing those of 2017 ICO levels.

Like BTCMANAGER? Send us a tip!
Our Bitcoin Address: 3AbQrAyRsdM5NX5BQh8qWYePEpGjCYLCy4

Related Posts:

  • No Related Posts

Jacks Club Review

… casino platform which allows users to make deposits, place bets and withdraw winnings in Bitcoin, Ethereum, Dogecoin and Bitcoin Cash.

Platform name: Jacks Club

Website:https://jacksclub.io/

Contact:info@jacksclub.io

Social Media Channels

Twitter: https://twitter.com/JacksClubIO

Telegram: https://t.me/jacksclub_official

BitcoinTalk: https://bitcointalk.org/index.php?topic=5246554

Jacks Club is a relatively new online crypto casino platform that offers a range of provably fair game titles to its user-base. The creators of Jacks Club aren’t new to the crypto gambling space as they have earlier worked with another crypto gambling platform by the name Rollin.io. Their prior experience in the industry is obvious in the way Jacks Club is designed as it makes it easy for the users to navigate and place their bets compared to some of the other platforms.

It is worth noting that the Jacks Club is still in Beta phase, with lots of new updates due over the coming months as the platform continues to implement new features while updating the existing ones based on the inputs and feedback received from its user-base.

Getting Started on Jacks Club

To start betting on Jacks Club, the player must first have an account on the platform. All one needs is an email address to create an account. They just have to enter the email address, set a username, password, and hit the create account button. Once the registration process is initiated, they will just have to verify their email address and they are ready to start placing bets on Jacks Club.

The number of game options currently available on Jacks Club is a bit a limited, with four titles – Dice, Blaze, HiLo and Video Poker. However, in the coming days, the platform intends to further expand its offering by including more game titles. Given that all the games hosted on Jacks Club are provably fair, users can verify the outcome of each bet at any time to ensure that there has been no manipulation of results.

Placing bets

Jacks Club is a crypto-only casino platform which allows users to make deposits, place bets and withdraw winnings in Bitcoin, Ethereum, Dogecoin and Bitcoin Cash. According to the platform, there are plans to extend support to other leading cryptocurrencies including USDT, Litecoin and Ripple.

The platform makes betting much more rewarding by offering an attractive VIP program that gives users access to exclusive bonuses, promotions, competitions, and real-world rewards. Users just have to continue playing on the platform to climb up the milestones ladder and avail VIP benefits.

Each milestone the player surpasses while placing bets on Jacks Club allows the users to rake up more bonus prizes that also include Mystery Resort stay, Mystery Cruise, and even a Mystery Car. VIP players also get dedicated account managers whose aim is to make the entire gambling experience on Jacks Club a memorable one. And then, there is the $10K progressive jackpot that provides an opportunity for the lucky ones to score big. The platform contributes 0.05% of each bet to the jackpot and any player wagering more than $0.01 can potentially win the jackpot which is capped to a maximum 250,000% (2500 times) of the bet value.

The platform also has a customer support infrastructure in place, which can be reached by sending an email to info@jacksclub.io or on Telegram.

Conclusion

Overall, Jacks Club scores high points when it comes to ease of use and transparency. Because it is relatively new, be sure to do your due diligence. Given their already proven track-record and rapid development of new and exciting features, we have high hopes for the future of this casino.

Leave a Reply Cancel reply

You must be logged in to post a comment.

Related Posts:

  • No Related Posts

Next DeFi Boom to Come Out of “Useless” Cryptocurrencies: Messari

Researcher Ryan Watkins wrote that a capital shift from “useless” cryptocurrency projects might help the DeFi tokens boom. Most of these dead …
  • As the decentralized finance sector explodes in value, a recent Messari report indicates that the so-called DeFi boom is likely to continue.
  • Researcher Ryan Watkins wrote that a capital shift from “useless” cryptocurrency projects might help the DeFi tokens boom.
  • Most of these dead projects are listed among the top-30 cryptocurrencies, stated Mr. Watkins.

Some of the DeFi tokens that rallied by thousands of percent in 2020 may just extend their bull run further, according to Messari’s latest report on the decentralized finance sector.

Researcher Ryan Watkins noted that the DeFi tokens, on the whole, make up just 1.5 percent of the entire cryptocurrency market. That is despite the existence of credible startups that promise excellent returns to their investors in the long-run.

DeFi, bitcoin, cryptocurrency, cryptoDeFi, bitcoin, cryptocurrency, crypto

DeFi market size compared to other crypto projects. Source: Messari

Mr. Watkins also noted that the projects that hold a more significant portion of the crypto market–especially those listed in the top-30– are “useless first-generation cryptocurrencies.”

They include the so-called “Ethereum Killers” that have done very little in displacing the second-largest blockchain platform. They also include vaporwave that raised a large sum of money during the 2017 ICO boom but never delivered a working product to this date.

“Even Dogecoin, a literal meme coin, is worth more than nearly every asset in DeFi,” wrote Mr. Watkins.

Capital Reallocation

Mr. Watkins noted that the crypto investors would eventually want to reallocate their capital from “worthless” crypto projects into yield-driven DeFi products. The researcher further stated the DeFi itself does not need new money flowing to continue its rise, which also increases the sector’s ability to rise without a doubt.

“It may seem like DeFi has already arrived with its recent run, but at just 1.5% of the entire crypto market, it could just be getting started,” he wrote.

Aave, cryptocurrency, LEND, DeFiAave, cryptocurrency, LEND, DeFi

DeFi token LEND rallied by more than 1,650% in 2020. Source: TradingView.com

Mr. Watkins also noted why investors would want to move outside the top-30 crypto tokens, other than Bitcoin and Ethereum. He said that most of the mentioned cryptocurrencies operate as “non-sovereign stores of value.”

“In theory most layer 1s are priced according to their probability of winning this market,” the analyst explained.

Not an ICO Bubble

Mr. Watkins also went against comparing the 2020’s DeFi boom with the 2017’s ICO craze.

He noted that the ICO market attracted billions of dollars worth of investments without even delivering a working product. On the other hand, a majority of DeFi projects already have live products. Moreover, they are already cash flows for their investors.

“However, despite all the attention and activity, DeFi still remains an incredibly small part of the total crypto market,” he added. “In fact, the entirety of what we call DeFi is worth less than both XRP and Bitcoin Cash alone.”

Related Posts:

  • No Related Posts

The entire DeFi market is worth less than XRP or Bitcoin Cash, despite the frenzy

The entirety of what we call DeFi is worth less than both XRP and Bitcoin Cash alone. Despite its rerating over the past couple months, DeFi is still …

The DeFi market has exploded in recent times, bringing back ICO-like returns on some projects. But a recent report said that despite the frenzy, the sector remains a fraction of the crypto space and is worth less than XRP or Bitcoin Cash.

Even Dogecoin worth more

Ryan Watkins, an analyst at Messari, tweeted yesterday that “despite its rerating over the past couple months, DeFi is still extremely small in perspective.”

The entirety of what we call DeFi is worth less than both XRP and Bitcoin Cash alone.

Despite its rerating over the past couple months, DeFi is still extremely small in perspective.

1/ pic.twitter.com/rd4LZbDeu6

— Ryan Watkins (@RyanWatkins_) July 28, 2020

Using a variety of metrics, Watkins said DeFi’s relative stature becomes even starker when “comparing it to all publicly traded layer 1s outside Bitcoin and Ethereum.” Such projects are cumulatively worth over $45.7 billion, with the DeFi market “an order of magnitude.”

Watkins noted even Dogecoin — the meme coin joked about being used by Shiba-Inu dogs — is “worth more than nearly every asset in DeFi.”

Even Dogecoin, a literal meme coin, is worth more than nearly every asset in DeFi. pic.twitter.com/cpVIaoAPL2

— Ryan Watkins (@RyanWatkins_) July 28, 2020

DeFi doesn’t need new money flowing into crypto to continue its rise, said Watkins. He noted the DeFi sector has been rising since the infamous “Black Thursday” in March, but Compound’s liquidity mining program served as a spark.

COMP tokens were issued at a price of $60 in June; quickly reaching $350 days later. Projects like Yearn Finance had even gargantuan returns — literally giving investors 100,000x returns days after launch.

Watkins said most investors are “scrambling over each other” to get in on DeFi tokens, which “unlike most ICOs in 2017, have live products rather than pipe dreams.” He adds:

“Further adding to the excitement, many DeFi tokens also generate cash flows, allowing investors to frame these tokens’ value using more common valuation methods.”

DeFi continues to heat up

CryptoSlate’s proprietary tracker shows the DeFi space makes up only 1.39 percent. of the entire crypto market. Sector volume in the past days (calculated from press time) stands at $541.99 million with a market cap of $4.5 billion.

Image: CryptoSlate DeFi tracker

Among the DeFi players, Ampleforth has flipped Maker as the top-ranked DeFi project by market cap. It’s AMPL tokens saw a surge earlier this month, but have since fallen by 34 percent in the past week.

Earlier this week, MakerDAO became the DeFi platform to reach the milestone early on Monday. The development followed an increased mainstream interest in the sub-sector and Ethereum breaking above $300 over the weekend.

So many people got this one wrong…..

Maker becomes the first DeFi protocol to cross the magical $1B TVL mark. https://t.co/VN5mFB54Uvpic.twitter.com/HtI4jFOCia

— SpartanBlack (@SpartanBlack_1) July 27, 2020

But as Messari’s report shows; the DeFi sector still has a long way to go.

Posted In: DeFi

Like what you see? Subscribe for daily updates.

Commitment to Transparency: The author of this article is invested and/or has an interest in one or more assets discussed in this post. CryptoSlate does not endorse any project or asset that may be mentioned or linked to in this article. Please take that into consideration when evaluating the content within this article.

Disclaimer: Our writers’ opinions are solely their own and do not reflect the opinion of CryptoSlate. None of the information you read on CryptoSlate should be taken as investment advice, nor does CryptoSlate endorse any project that may be mentioned or linked to in this article. Buying and trading cryptocurrencies should be considered a high-risk activity. Please do your own due diligence before taking any action related to content within this article. Finally, CryptoSlate takes no responsibility should you lose money trading cryptocurrencies.

Related Posts:

  • No Related Posts