Do Son ASEC confirmed Kinsing is exploiting Apache ActiveMQ RCE (CVE-2023-46604) to deploy XMRig cryptominer. The group now integrates Sharpire, Cobalt Strike, and Meterpreter for advanced post-exploitation.
Kinsing
Threat actors have unleashed a diverse arsenal of malware, including a newly discovered Golang-based botnet named GoTitan