New NKAbuse malware abuses NKN blockchain for stealthy comms

New NKAbuse malware abuses NKN blockchain for stealthy comms

December 14, 2023 at 05:16PM

NKAbuse is a new Go-based multi-platform malware exploiting NKN (New Kind of Network) technology. It targets Linux desktops, IoT devices, and supports MIPS, ARM, and 386 architectures. It uses NKN for DDoS attacks and as a remote access trojan, making it difficult to detect and defend against. Its use of blockchain tech complicates defense efforts. (50 words)

Based on the meeting notes, here are the key takeaways:

1. NKN (New Kind of Network) is a decentralized peer-to-peer network protocol leveraging blockchain technology to optimize data transmission speed and latency across the network.

2. NKAbuse is a new Go-based multi-platform malware that abuses NKN technology for data exchange, making it a stealthy and versatile threat.

3. NKAbuse primarily targets Linux desktops in Mexico, Colombia, and Vietnam, with the capability to compromise IoT devices and support multiple architectures.

4. NKAbuse uses NKN to launch DDoS attacks that are hard to trace back to a specific infrastructure due to the novel protocol not actively monitored by most security tools.

5. NKAbuse acts as a remote access trojan (RAT) on compromised systems, allowing operators to perform command execution, data exfiltration, and take screenshots.

6. The combination of NKN and blockchain technology makes defending against NKAbuse very challenging due to its capabilities and obfuscation of attack source.

These takeaways summarize the key points discussed in the meeting notes, providing a clear understanding of the potential threats posed by NKAbuse and the technology it exploits.

Full Article