Detecting and Mitigating Smominru Attacks
with Guardicore Centra

Smominwho? Large botnet threats unpatched networks

The Smominru botnet is a large active data and resource stealing criminal operation. Attacking unpatched Windows machines vulnerable to EternalBlue, weakly protected MS-SQL servers and RDP gateways, this botnet burrows deep into machines and uses their power for crypto mining.

90K

Infections
Within a Month

4.7K

Daily
Infections

4.9K

Infected
Networks

Hosts in Most
Infected Network

25%

of Hosts Infected
More Than Once

Infected Machines Per
Network on Average

Smominru Attack Full Report from Guardicore Labs

Read the full Guardicore Labs Report on the Smominru attack to discover:

The typical victims’ profile of this breach and how badly were they compromised
How you can detect if your network has been breached
Where the attacker infrastructure is and how to best block these attackers

It’s not only prime targets who are risk from sophisticated data jacking attacks like Smominru. Protect yourself with Guardicore Centra, access a single, scalable platform with real-time threat detection and response capabilities that utilize multiple detection methods, integrated response, and detailed forensics for your legacy systems.

Easily Segment to Virtually Patch

Can’t patch against MS17-010? Segment these machines away from the internet with ease, blocking incoming SMB from servers in the DMZ to prevent lateral movement.

Get Greater Visibility into Infected Systems

Using Centra, you can see your network and all its traffic, enabling you to quickly see and handle possible breaches in your networks.

Protect Your Most Vulnerable Legacy Gear

You can’t easily change your legacy systems but Centra will still protect them. Whether its end of life systems or legacy hardware, Centra can help you secure your network against attacks preying on old machines.

1 2