XMRig

JINX-0132: Cryptojackers Exploit Misconfigured DevOps Environments

• Malware

JINX-0132: Cryptojackers Exploit Misconfigured DevOps Environments

Do Son June 3, 2025 0

Wiz uncovers JINX-0132, a cryptojacking campaign exploiting misconfigured Nomad, Consul, Docker, and Gitea in DevOps environments to mine Monero.

RedisRaider Worm Exploits Misconfigured Redis for Cryptojacking

• Malware

RedisRaider Worm Exploits Misconfigured Redis for Cryptojacking

Do Son May 9, 2025 0

RedisRaider malware exploits misconfigured Redis servers to deploy cryptominers via cron jobs, evading detection with obfuscation and anti-forensics.

Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining

• Malware

Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining

Do Son May 1, 2025 0

Outlaw botnet targets Linux servers via weak SSH, using Perl scripts and XMRig miners for crypto mining and backdoor access, Kaspersky warns.

Malicious VSCode Extensions Caught Mining Crypto with XMRig

• Malware

Malicious VSCode Extensions Caught Mining Crypto with XMRig

Do Son April 9, 2025 0

Ten popular Visual Studio Code extensions were found secretly installing XMRig miners, exploiting users’ CPUs for unauthorized cryptomining.

Massive Cyber Campaign Exploits 4,000 ISP IPs in the U.S. and China for Credential Theft and Cryptojacking

• Malware

Massive Cyber Campaign Exploits 4,000 ISP IPs in the U.S. and China for Credential Theft and Cryptojacking

Do Son March 6, 2025 0

Learn about the ISP Infostealer Campaign and its severe impacts on ISP infrastructure through brute force and data exfiltration.

Aviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed

• Vulnerability

Aviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed

Do Son January 12, 2025 0

Exploitation of CVE-2024-50603 is already occurring in the wild. Wiz Research observed attackers deploying cryptocurrency miners (XMRig) and backdoors

RisePro and PrivateLoader Threat Actors Strike Again with RiseLoader

• Cyber Security
• Malware

RisePro and PrivateLoader Threat Actors Strike Again with RiseLoader

Do Son December 18, 2024 0

Discover RiseLoader, a new malware family focused on efficient payload delivery. Get insights into its origins, similarities with RisePro, and advanced anti-analysis measures.

Cybercriminals Exploit Legitimate Windows Tool for Cryptojacking

• Malware

Cybercriminals Exploit Legitimate Windows Tool for Cryptojacking

Do Son September 10, 2024 0

ASEC reveals the increasing sophistication of cybercriminals distributing XMRig malware through Binary Managed Object Files. Stay informed about this threat.

The Hidden Threat in Man Pages: Kinsing Malware Targets Apache Tomcat Servers

• Cyber Security
• Malware

The Hidden Threat in Man Pages: Kinsing Malware Targets Apache Tomcat Servers

Do Son May 23, 2024 0

The persistent cyber threat known as Kinsing malware has taken a new and sophisticated approach to its cryptojacking campaign

Palo Alto Firewalls Under Attack: Critical Flaw Exploited to Deploy Cryptojacking Malware

• Cyber Security
• Malware
• Vulnerability

Palo Alto Firewalls Under Attack: Critical Flaw Exploited to Deploy Cryptojacking Malware

Do Son April 28, 2024 0

Cato Networks reported intercepting several attempts aimed at installing the XMRig cryptocurrency mining malware using this vulnerability

DreamBus: The Linux-Based Malware Targeting Business Applications

• Malware

DreamBus: The Linux-Based Malware Targeting Business Applications

Do Son January 11, 2024 0

A Linux-based malware family, DreamBus has been quietly evolving, honing its capabilities to exploit vulnerabilities in business applications