Security company: Dual-version mining Trojan MServicesX uses white signature to evade antivirus software

According to Tencent Smart Security Yujian Threat Intelligence Center, a mining Trojan MServicesX with dual versions for Windows and Android has quietly become popular recently. Infected computers and mobile phones will run Monero mining programs, causing abnormal heating and even damage to the equipment.

The mining Trojan MServicesX is very good at disguising itself. On the computer side, it uses files with legitimate digital signatures to avoid detection by security software. On the Android phone side, it disguises itself as YouTube video player software. When unsuspecting users use it to watch videos on their phones, the virus will run the Monero mining program in the background. Data shows that in China, Guangdong, Jiangsu and Hong Kong have the largest number of infections.