Skip to main content

Mysterious Iranian group is hacking into DNA sequencers

DNA

See also

Web-based DNA sequencer applications are under attack from a mysterious hacker group using a still-unpatched zero-day to take control of targeted devices.

The attacks have started two days ago, on June 12, and are still going on, according to Ankit Anubhav, a security researcher with NewSky Security, who shared his findings with ZDNet.

Hackers planting shells on DNA sequencer web apps

Anubhav says the group, which operates from an Iran-based IP address, has been scanning the internet for dnaLIMS, a web-based application installed by companies and research institutes to handle DNA sequencing operations.

The researcher told ZDNet the hacker is exploiting CVE-2017-6526, a vulnerability in dnaLIMS that has not been patched to this day after the vendor was notified back in 2017.

Anubhav says the attackers are using this vulnerability to plant shells that allow them to control the underlying web server from remote locations.

Attack motives unknown

It is unclear how the group is using these backdoors into hacked systems, post infection. Anubhav says there could be two scenarios.

In the first, the attacker may be looking to exfiltrate hashes of DNA sequences from the application's database.

"DNA theft in specific cases can be fruitful," Anubhav said. "Either it can be sold on the black market, or a high profile attacker can actually be looking for a specific person's data."

Second, and the most plausible scenario, is that the attackers might be using the infected servers as part of a botnet, or using the shell to plant cryptocurrency miners on the hijacked systems.

A previous ZDNet report highlighted that most IoT botnets nowadays are the works of attention-seeking kids that take random exploits from the ExploitDB exploit database and assemble botnets at random.

This might be one of those cases, with this botnet's author using an exploit at random, not knowing what they're actually targeting.

"This particular attack may not be useful for a script kiddie or a botnet operator," Anubhav said, pointing out that there are only between 35 and 50 such highly-complex DNA sequencer apps available online, a number far too small to build a botnet around.

Group also targeted routers and Struts servers

Furthermore, the theory that this might be the work of a script kiddie playing with random exploits, rather than a nation-state sponsored group, becomes more believable when we look at the historical activity coming from the attacker's IP address.

Per NewSky's own records, the attacker has been seen using the nmap tool to scan the internet and attempt to use two other exploits to take over systems -- one for Zyxel routers, and a second for Apache Struts installations.

"We can not decide on the motive of these attacks just yet," Anubhav told ZDNet. "Regardless, the DNA sequencer systems which hold this confidential information can get pwned."

With the vendor refusing to patch the security flaw back in 2017, these systems remain open for attacks.

The dangers that these systems pose can only be evaluated on a per-case basis. If the DNA sequencing data is anonymized, any stolen data will most likely be useless. If not, then a serious breach may occur if the hackers have stolen any info from these systems.

Sure, DNA data may be useless right now, but with biometric solutions spreading every year, non-anonymized data might be actually worth something in a few years from now.

More IOCs about this attack are available in Anubhav's report.

AI, cybersecurity, programming languages,... SEE FULL GALLERY 1 - 5 of 12

Related malware and cybercrime coverage:

37 Comments

I needed to create you a very small note to help thank you very much yet again relating to the exceptional advice you have provided in this case. This has been simply strangely open-handed with you to supply publicly just what many of us could have advertised as an ebook to generate some cash for themselves, principally since you might have done it if you wanted. The tips likewise worked like a good way to comprehend most people have similar interest similar to mine to know lots more with regard to this problem. I know there are many more fun situations in the future for individuals who examine your site. jordans http://www.air-jordanshoes.us.org

I must express some thanks to you for bailing me out of this particular instance. Just after exploring through the internet and obtaining things which were not beneficial, I believed my life was well over. Existing without the presence of strategies to the problems you've resolved by means of your entire review is a critical case, as well as the ones which might have adversely damaged my entire career if I had not discovered your blog. Your personal talents and kindness in controlling every aspect was tremendous. I don't know what I would have done if I hadn't encountered such a point like this. I can also at this time relish my future. Thank you so much for this skilled and result oriented help. I will not hesitate to recommend the blog to any individual who wants and needs guidelines on this area. michael kors purses http://www.michael-kors-handbags.org.uk

I not to mention my friends were taking note of the great tips and tricks located on the blog while quickly got a horrible suspicion I had not thanked the site owner for those secrets. Those boys had been certainly joyful to read all of them and already have surely been making the most of those things. I appreciate you for actually being really helpful and then for utilizing this form of notable tips millions of individuals are really desirous to know about. My very own honest apologies for not expressing gratitude to you earlier. yeezy 500 http://www.adidasyeezy500.us.com

My husband and i ended up being so satisfied when Emmanuel could deal with his survey by way of the ideas he came across when using the site. It is now and again perplexing to simply always be giving out tips and tricks that the rest may have been selling. Therefore we discover we have got the writer to give thanks to because of that. All of the illustrations you've made, the easy site navigation, the friendships your site make it easier to promote - it's all superb, and it's really facilitating our son in addition to our family believe that this idea is brilliant, which is highly serious. Thank you for the whole thing! supreme hoodie http://www.supremeclothingonline.us.org

A lot of thanks for every one of your work on this blog. My niece delights in managing investigation and it is easy to see why. My spouse and i hear all relating to the powerful method you deliver very useful items on this website and even strongly encourage participation from website visitors on that concept plus our favorite princess is without a doubt studying a whole lot. Take advantage of the remaining portion of the new year. You're the one doing a superb job. moncler http://www.monclersoutlet.us.com

I enjoy you because of all of the work on this web page. My mum take interest in carrying out internet research and it is obvious why. All of us notice all concerning the powerful way you deliver effective secrets on the blog and as well as encourage participation from some other people on that content so our own child has always been starting to learn a whole lot. Take pleasure in the rest of the new year. You are always carrying out a stunning job. golden goose sneakers http://www.goldengoose-sneakers.com

Thank you for your own labor on this website. My mum loves going through internet research and it is easy to see why. We notice all of the lively way you produce vital secrets on your website and increase contribution from visitors on this point while our child is now understanding so much. Take advantage of the remaining portion of the year. You are carrying out a tremendous job. nike air max http://www.nikeairmax2019.us.com

Thank you for each of your efforts on this web page. Kim really loves going through investigations and it is simple to grasp why. All of us learn all relating to the lively way you offer precious thoughts by means of this web site and strongly encourage response from the others on this content plus our favorite child is being taught a great deal. Have fun with the rest of the new year. You have been carrying out a terrific job. coach outlet http://www.coachoutletstorefactory.com

Thank you so much for giving everyone an exceptionally memorable possiblity to read articles and blog posts from this site. It is usually very awesome plus jam-packed with a lot of fun for me personally and my office co-workers to visit your web site at the very least thrice per week to learn the fresh secrets you have. Of course, I'm just actually pleased with the surprising strategies served by you. Certain 3 tips in this post are really the most suitable we have all ever had. nike air max 270 http://www.nike270.us

I am also commenting to make you be aware of of the helpful experience my wife's princess enjoyed going through the blog. She noticed a wide variety of issues, which included what it is like to possess a very effective helping mood to make others without problems know precisely selected tricky issues. You really did more than readers' desires. Many thanks for giving the useful, dependable, explanatory as well as unique thoughts on this topic to Evelyn. kd shoes http://www.kd-10.us

I would like to get across my admiration for your generosity in support of persons who should have help on in this subject matter. Your special commitment to getting the solution across became really invaluable and have surely permitted employees like me to reach their ambitions. Your own interesting tutorial implies this much a person like me and much more to my fellow workers. Many thanks; from everyone of us. kyrie shoes http://www.kyrieirving-shoes.us.com

I wanted to draft you the tiny observation so as to thank you so much as before relating to the unique basics you've documented on this page. This has been strangely generous with you to make easily just what a few people would've offered for sale for an electronic book to earn some bucks on their own, chiefly seeing that you could possibly have done it if you wanted. These techniques in addition worked as the great way to fully grasp that other individuals have the identical zeal really like mine to learn a lot more concerning this issue. I'm certain there are a lot more fun occasions in the future for those who start reading your blog. adidas stan smith men http://www.adidasstansmith.us.com

I definitely wanted to type a note in order to appreciate you for the awesome tips you are writing at this site. My extensive internet look up has now been rewarded with reliable concept to share with my pals. I 'd repeat that we readers actually are unquestionably blessed to dwell in a very good community with many lovely professionals with very beneficial tips and hints. I feel rather blessed to have come across your site and look forward to tons of more excellent minutes reading here. Thanks a lot once more for a lot of things. moncler http://www.monclers.us.org

I simply had to appreciate you yet again. I'm not certain what I would've carried out without these creative concepts provided by you concerning such a area of interest. This has been the traumatic setting in my view, however , being able to see a new well-written style you resolved the issue took me to weep over contentment. I am happier for this guidance and in addition expect you really know what a powerful job that you're putting in training men and women through your blog. Most probably you haven't met all of us. curry 4 http://www.curry4shoes.us.com

I am also writing to let you understand what a amazing discovery my child encountered viewing your site. She picked up some things, most notably what it's like to possess an ideal giving mood to make certain people just grasp specific grueling issues. You truly did more than visitors' expectations. Thanks for displaying the interesting, trustworthy, edifying and even easy tips about the topic to Mary. balenciaga http://www.balenciaga.us.com

I have to point out my gratitude for your kind-heartedness giving support to men who should have guidance on this area. Your special dedication to passing the message along was astonishingly effective and have in most cases helped professionals like me to achieve their goals. Your new important facts entails a lot a person like me and extremely more to my peers. Thank you; from everyone of us. kevin durant shoes http://www.kevindurant-shoes.us.com

Needed to write you the very small note to be able to say thanks once again just for the great basics you've shared above. This is really pretty generous with you to give freely what many of us would have made available as an e-book to earn some money on their own, primarily since you could possibly have tried it if you desired. Those suggestions also worked like a great way to fully grasp that some people have the identical passion the same as mine to know many more with reference to this condition. I know there are a lot more enjoyable opportunities up front for people who examine your blog. adidas yeezy http://www.yeezyadidas.us.com

I actually wanted to develop a simple note to be able to express gratitude to you for some of the amazing hints you are posting here. My incredibly long internet investigation has at the end been rewarded with useful points to go over with my family members. I 'd declare that most of us readers actually are undoubtedly lucky to be in a fantastic site with many lovely people with very helpful strategies. I feel truly blessed to have seen your webpages and look forward to some more thrilling times reading here. Thanks a lot again for a lot of things. reebok shoes http://www.reebokoutlet.us.org

Thank you so much for giving everyone such a memorable possiblity to read from here. It's usually very lovely and as well , full of a great time for me personally and my office acquaintances to search your blog really 3 times in one week to read through the new issues you have got. And definitely, we're usually pleased for the remarkable thoughts you serve. Selected 3 ideas on this page are undoubtedly the very best we have all had. cheap jordans http://www.cheapjordans.us.org

I am also writing to let you understand of the remarkable encounter my wife's princess went through visiting the blog. She noticed several things, with the inclusion of what it is like to possess an ideal teaching heart to let other folks with no trouble master a variety of complex matters. You really surpassed her expected results. Thanks for supplying these precious, trusted, edifying not to mention unique guidance on the topic to Janet. hogan outlet online http://www.hogan-outlet.us.com

I simply wished to thank you very much once again. I'm not certain the things that I would've followed in the absence of the secrets discussed by you regarding that subject matter. This was a real distressing concern for me personally, nevertheless coming across a specialized strategy you treated that made me to cry with gladness. I'm just thankful for this guidance and thus sincerely hope you comprehend what a powerful job you happen to be carrying out training men and women with the aid of your websites. Most likely you have never encountered any of us. nfl jerseys http://www.nfljerseys.us.org

My wife and i ended up being delighted Louis could finish off his analysis through your precious recommendations he was given while using the site. It is now and again perplexing just to find yourself giving freely strategies that some people may have been selling. We realize we have got the writer to thank for that. All of the explanations you've made, the straightforward web site menu, the relationships your site help promote - it's all amazing, and it's facilitating our son and our family reason why the article is brilliant, which is very pressing. Thank you for all the pieces! golden goose outlet http://www.goldengoose-sneakers.us

Thanks a lot for giving everyone an exceptionally nice chance to check tips from here. It can be so nice and as well , full of amusement for me and my office friends to search your site nearly 3 times in a week to find out the new issues you will have. Of course, we're at all times fulfilled for the fabulous things you give. Selected 1 facts on this page are without a doubt the finest I have ever had. supreme clothing http://www.supremesclothing.com

I enjoy you because of all of your work on this web page. Debby delights in carrying out research and it's simple to grasp why. My spouse and i learn all relating to the compelling method you give reliable tips and hints by means of the blog and boost contribution from some others about this subject matter plus our simple princess is truly starting to learn a lot of things. Take pleasure in the remaining portion of the new year. You're carrying out a glorious job. nike lebron 16 http://www.lebron16.us

Thanks for every one of your labor on this site. My mom enjoys going through investigation and it is simple to grasp why. Most people know all relating to the lively manner you present precious things via the website and improve response from website visitors on the theme then our own princess is always starting to learn a lot of things. Have fun with the rest of the new year. You're doing a remarkable job. moncler http://www.monclercoat.us.com

I wish to express appreciation to the writer for bailing me out of this difficulty. Right after looking out through the the web and finding solutions which are not beneficial, I believed my entire life was well over. Being alive devoid of the solutions to the difficulties you have sorted out as a result of this guide is a critical case, as well as those which may have adversely damaged my entire career if I hadn't noticed the blog. Your good training and kindness in playing with every item was tremendous. I'm not sure what I would have done if I had not encountered such a point like this. I am able to at this moment look forward to my future. Thank you very much for your expert and results-oriented guide. I will not be reluctant to recommend the website to anybody who would need counselling on this topic. hermes belt http://www.hermes-belt.us.com

I would like to express my affection for your generosity in support of folks that actually need help with the issue. Your real dedication to getting the message up and down became definitely powerful and have in every case allowed girls like me to attain their pursuits. Your personal important hints and tips implies a lot a person like me and especially to my office colleagues. Warm regards; from all of us. jordan shoes http://www.jordan12.us.com

I would like to express some thanks to this writer for bailing me out of such a incident. Because of looking out through the search engines and seeing proposals which were not beneficial, I figured my entire life was well over. Existing devoid of the answers to the issues you've fixed all through your main website is a serious case, and the kind that could have in a negative way affected my entire career if I hadn't encountered your website. Your main ability and kindness in maneuvering all the things was very useful. I am not sure what I would've done if I had not come across such a stuff like this. I can at this point look forward to my future. Thanks a lot very much for this specialized and amazing guide. I will not hesitate to endorse your web blog to any person who should have guidance on this subject. golden goose http://www.goldengoosesneakersstore.com

I happen to be commenting to let you understand of the amazing experience my child had reading your web page. She came to understand a lot of things, which include what it's like to possess an excellent teaching spirit to make other people smoothly learn about certain problematic matters. You really surpassed our own desires. Thank you for distributing those great, dependable, revealing as well as cool tips about this topic to Jane. curry 6 http://www.curry6.net

I wish to show my appreciation for your generosity in support of those who must have help on the concern. Your special commitment to getting the solution up and down appears to be exceedingly functional and has surely allowed individuals much like me to get to their dreams. Your personal useful information denotes this much to me and much more to my fellow workers. Warm regards; from everyone of us. supreme clothing http://www.supremesclothing.com

I simply wanted to write a brief comment so as to appreciate you for these great suggestions you are writing on this site. My extended internet investigation has now been rewarded with high-quality facts and techniques to exchange with my friends and classmates. I would point out that we readers actually are truly endowed to live in a remarkable place with many lovely people with helpful advice. I feel pretty lucky to have used the website page and look forward to so many more excellent moments reading here. Thanks a lot again for all the details. nike epic react flyknit http://www.nikereact.us.com

I'm just commenting to make you understand of the amazing discovery my daughter experienced using yuor web blog. She realized a wide variety of issues, including what it is like to possess a marvelous coaching nature to have many people smoothly gain knowledge of several tortuous topics. You really exceeded our own desires. I appreciate you for producing these powerful, safe, revealing and also cool tips about that topic to Sandra. yeezy wave runner 700 http://www.yeezy700.us.com

I would like to point out my passion for your kindness in support of those people that really want help on the field. Your personal commitment to passing the solution all over was rather helpful and has truly allowed girls just like me to realize their desired goals. Your warm and friendly instruction implies this much a person like me and much more to my fellow workers. Thank you; from each one of us. christian louboutin http://www.christianlouboutinsoutlet.net

I wanted to put you a little bit of word so as to give thanks over again considering the unique tactics you've discussed on this website. This is really remarkably generous of you to offer extensively exactly what a few people could possibly have offered as an e-book to help make some dough for themselves, certainly seeing that you could possibly have done it if you ever considered necessary. Those ideas additionally served to provide a great way to be aware that some people have similar keenness the same as mine to know significantly more with reference to this problem. I am sure there are many more pleasant opportunities up front for people who scan your blog post. golden goose http://www.goldengoosesonline.com

I must show appreciation to the writer for rescuing me from such a scenario. After surfing throughout the world wide web and coming across proposals which are not productive, I figured my entire life was well over. Living without the answers to the difficulties you've resolved by way of your good guideline is a critical case, and the ones that could have adversely damaged my career if I hadn't discovered the blog. The talents and kindness in taking care of every aspect was tremendous. I am not sure what I would've done if I hadn't encountered such a step like this. I can now look forward to my future. Thank you very much for your high quality and effective guide. I will not be reluctant to recommend the sites to any person who would like guide about this subject. russell westbrook shoes http://www.russellwestbrookshoes.us

I and also my guys came taking note of the excellent items found on your site and then at once got a terrible suspicion I never expressed respect to the blog owner for those tips. Those people came for that reason warmed to read them and have in effect unquestionably been making the most of those things. Appreciate your genuinely indeed thoughtful and then for using this kind of great things millions of individuals are really eager to understand about. My personal honest apologies for not saying thanks to you earlier. yeezy boost 350 http://www.yeezy-boost.us.com

I in addition to my pals happened to be reading the great information located on the blog then suddenly I had a horrible suspicion I had not thanked the site owner for them. Most of the women were warmed to see them and have certainly been making the most of these things. Thank you for turning out to be indeed kind and also for going for some essential topics most people are really desperate to learn about. Our sincere apologies for not expressing gratitude to earlier. supreme new york http://www.supremenewyork.us.com

Add new comment

Plain text

  • No HTML tags allowed.
  • Lines and paragraphs break automatically.
  • Web page addresses and email addresses turn into links automatically.
The comment language code.