The Australian Cyber Security Centre said a group of “state actors” hacked Australian networks on June 19 and one of the vulnerabilities they exploited is related to cryptojacking malware attacks. According to the 48-page report released on June 24, the threat actors exploited four critical vulnerabilities in Telerik UI, including CVE-2019-18935, which was recently leveraged by the Blue Mockingbird malware gang to infect thousands of systems with XMRRig, a Monero (XMR) mining software.
Although the advisory didn’t say if hackers could have installed cryptojacking malware during the recent massive cyberattack, such vulnerability is the preferred one for the cybercriminals for installing crypto-mining applications within corporate networks. The report elaborates on the CVE-2019-18935 vulnerability, which also has similarities with the ones that were previously reported on the Blue Mockingbird’s attack, although it doesn’t imply that such gang participated in the cyberattack against Australia:
“Other exploit payloads were identified by the ACSC most commonly when the actor’s attempt at a reverse shell was unsuccessful. These included: a payload that attempted to execute a PowerShell reverse shell; a payload that attempted to execute certutil.exe to download another payload; a payload that executed binary malware (identified in this advisory as HTTPCore) previously uploaded by the actor but which had no persistence mechanism; a payload that enumerated the absolute path of the web root and wrote that path to a file within the web root.”
Almost 10 Chinese hacker groups – engaged with espionage activities and allegedly have connections with China’s government – have the PlugX malware among their weapons, which was one of the malware identified in the Australian government’s report. Some Australian officials have suggested that China could be behind the massive cyberattack, as the diplomatic issues have been on the rise between the two countries. It was said the attack could have come after Australia sought for an investigation on the origin of the COVID-19 virus, something that was not well-received the dragon nation officials, as they considered it a “discriminatory” accusation and responded with trade retaliation against the Oceanic country. The Chinese government has denied the claims.
3 Big Blockchain Firms Working Together On A DeFi Product That Pays Passive Income
In a special announcement made at the Unitize conference on July 6, Cosmos, Polkadot, and Terra revealed a new DeFi savings product called Anchor that aims to offer dependable interest rates on stablecoins deposits. The companies involved in the creation of Anchor plan to launch it across their respective blockchains at the end of Q3 this year and scale across to other PoS blockchains in the future. Do Kwon, founder and CEO of Terra, explained in a prepared statement:
“While DeFi staples such as Maker and Compound have been revolutionary in creating fully decentralized crypto money markets, the volatility of their interest rates makes them unsuitable to be used as a household savings product. DeFi mass adoption needs the creation of a fully decentralized savings account that offers dependable APR.”
Anchor’s smart contracts receive stablecoin deposits and use a portion of them to acquire staking positions on compatible Proof of Stake blockchains. Users will receive their passive income from these staking rewards. The initial governance for this platform will come from the Interchain Asset Association (IAA), a newly formed organization that sees Zaki Manian of Cosmos, Jack Platts of the Web3 Foundation, and Do Kwon of Terraform Labs collectively steering the ship.
Telegram Is Set To Shut Down The TON Testnet By August 2020
Although Telegram has terminated its blockchain project, Telegram Open Network (TON), in May 2020, the TON test net has been apparently running for almost one year. In a July 6 update, the official TON development group on Telegram announced that it would be discontinuing its support of the test network for TON. Remaining TON validators will be turned off by August 1. In the post, the TON official recommended network participants save all their relevant data and stop their testing processes. Despite the testnet being set to shut down less than a month from now, network participants will still be able to continue their experimentation after the testnet is terminated. In order to do that, users can install their own testnet validators, described in greater detail in three different how-to documents containing guidelines for the Full Node, the Validator, and Test Grams.
Telegram launched the TON testnet for explorer and node software on Sept. 6, 2019. In anticipation of its scheduled Oct. 31 launch last year, the company released an alpha version of an iOS wallet to work with its native token, the Gram. But Telegram’s TON plans were never fully realized, as the United States Securities and Exchange Commission suddenly deemed Telegram’s $1.7 billion ICO illegal in mid-October. After a long-running legal battle with U.S. regulators, Telegram agreed to shut down its TON project, as well as return $1.2 billion to investors in line with a court-approved final settlement. As officially announced by Telegram CEO Pavel Durov, the firm had already reimbursed more than $1.2 billion by June 25.
Brock Pierce Enters The 2020 US Presidential Race
Brock Pierce, entrepreneur, crypto venture capitalist, and child star, has announced his USA Presidential run on Twitter July 5. His tweet stated: “
“I, Brock Pierce, am running for President of the United States of America.”
Pierce’s campaign site states that he is a pioneer digital currency and has raised more than $5 billion for the companies he has founded. Pierce is the Chairman of the Bitcoin Foundation and co-founder of EOS Alliance, Block.one, Blockchain Capital, Tether, and Mastercoin (first ICO). His website, sparse on details, does not say if he is seeking a nomination in a political party or if he is running as an Independent.