Big Problem... Mining Virus?

[gee21]

Hello

since 1-2 Weeks it run a process on my asustor 608t name: xmr-stack (using everytime 25-75% CPU of my NAS)

i killed the Process with putty (kill -9 PID) but after some hours it come back and use again 25-75% cpu....

what can i do? How can i protect against that? is it really a "mining cpu virus?"


Hope someone can help me....

[dhstsw]

xmr-stack is a monero miner ( https://github.com/fireice-uk/xmr-stak )

How it got installed in your NAS is the problem.

Either you installed something outsite App Central (and the miner was hidden inside the installation package) or, worse, you installed something 2 weeks ago from App Central that contained, hidden, the miner (and that means, it skipped Asustor controls before publishing).

I strongly suggest everybody to check the processes running in their nas.

[orion]

Fortunately, I cannot find this process on my NAS. I'm indeed interested in how the process be installed on your NAS.

[flavict]

Have a look at:

https://arstechnica.com/information-tec ... ers-again/