Tencent Yujian: "Blouiroet" mining trojan revived to control botnet computers in many countries for mining

On April 23, Tencent Yujian published a statement saying that mining Trojans have become more active recently due to the recent recovery of various encrypted virtual currency markets. Tencent Security Yujian Threat Intelligence Center has detected the revival of the "Blouiroet" mining Trojan, which is written in Delphi language. When the Trojan is running, it will first end all other mining Trojan processes and monopolize system resources to run the Monero mining program. After the "Blouiroet" mining Trojan was revived, it first updated multiple IPs, domain names and other infrastructure. The Trojan gang also built multiple mining pools, which can be said to be "having a mine at home". The zombie computers controlled by the "Blouiroet" mining Trojan are distributed in many countries. Russia, Ukraine and other places have been severely affected, and some computer systems in China have been affected.