Researchers from Avast have spotted a strain of cryptocurrency miner, Crackonosh, that abuses Windows Safe mode to avoid detection. The cryptocurrency miner spreads through illegal and cracked copies of popular software. The researchers started investigating the threat after they became aware that the malware was disabling and uninstalling its antivirus from infected devices. The malware continues to infect systems worldwide, experts estimated that roughly 1,000 devices are being hit each day. The latest version of the malware is due to be released in November 2020.”]
Source: https://securityaffairs.co/wordpress/119450/malware/crackonosh-monero-miner.html