Windows Malware Disguised as WAV Hides Cryptominer, Accidentally Causes BSOD

Security researchers from Guardicore revealed a sophisticated malware attack that managed to compromise some 800 devices belonging to a medium-sized company in the medical tech industry.

In a technical analysis of the attack, Guardicore explains that the malware infection was disguised as a WAV file and included a Monero cryptominer, using the notorious EternalBlue vulnerability to compromise other devices in the network.

The only thing the malicious actors got wrong was code that eventually caused a Blue Screen of Death (BSOD) on the infected machine, eventually raising suspicion and triggering an in-depth investigation into the fatal crash.

The BSODs were first experienced on October 14, Guardicore says, when its researchers discovered that machines hitting the fatal crash were trying to execute a long command line that was, in fact, a base-64 encoded Power...