Multiple exploitation attempts using the recently disclosed Samba vulnerability CVE-2017-7494 are looking to spread bitcoin miners—likely as part of an organized cybercrime ring. Cyphort Labs said in an analysis that the exploit incorporates advanced functionality that was barely released in the Metasploit framework a week ago, which reinforces the notion that cyber-criminals “have a pulse on recent developments and are quick to integrate newly disclosed information in their arsenal of weapons.” The vulnerability requires that the attacker has access to valid credentials or that the share is writable by guests.

Read full news article on Infosecurity