WannaMine: Cryptocurrency Mining Malware That Uses An NSA Exploit

CrowdStrike has observed more sophisticated capabilities built into a cryptomining worm dubbed WannaMine.

It also propagates via the EternalBlue exploit popularized by WannaCry.

In most cases, the victim will not notice anything, except that the computer runs slower.

However, WannaMine doesnt immediately look to force the EternalBlue exploit.

If that fails, WannaMine turns to the EternalBlue exploit to complete the task and break in.

source: www.techworm.net