Hacker Hijacks Storage Devices, Mines $620,000 in Dogecoin
Dogecoin, for those who don't spend their time indulging in Internet meta-memes, may seem like harmless nerdery. But for one enterprising hacker, it's created a small fortune—at the price of annoying a lot of systems administrators.
Context & Ripple Effects
Dogecoin's short history has been a running security case study: the Dogewallet theft marked the currency barely a week after launch, February brought the Harvard supercomputing cluster misused for Dogecoin mining and a ban for the perpetrator, and May saw the Doge Vault service lose a reported $56,000. This story extends the pattern from exchanges and shared computers to dedicated hardware — the attacker hijacked networked storage devices themselves, converting other people's infrastructure into a mining rig worth roughly $620,000.
First-order effects
- Systems administrators are left cleaning up compromised storage devices whose compute cycles were silently diverted to mining, with performance degradation as the visible symptom.
- The operator of the botnet walks away with an estimated $620,000 in Dogecoin mined entirely on hijacked hardware.
Second-order effects
- Vendors of network-attached storage face pressure to patch firmware and lock down default credentials, since their devices just demonstrated they are viable mining targets.
- Security teams gain a new detection problem: mining loads on storage gear look like ordinary utilization spikes, pushing monitoring toward behavioral baselines rather than signature lists.
Third-order effects
- If commodity embedded devices can be profitably conscripted at this scale, cryptojacking stops being a desktop-browser nuisance and becomes a botnet business model aimed at always-on infrastructure — a shift the corpus already foreshadowed with the Harvard cluster abuse earlier in 2014.
The trend: Cryptocurrency mining is migrating from owned rigs toward stolen computing infrastructure, turning any internet-connected device with spare cycles into a target.