Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Publicly-accessible servers have been often targeted for attacks. In recent years, there are cases where these servers are compromised and embedded with a cryptocurrency mining tool. JPCERT/CC confirmed cases with XMRig [1] in February 2021. This article introduces the details

Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

Large Scale Monero Cryptocurrency Mining Operation using XMRig

THREAT ALERT: Crypto miner attack - Sysrv-Hello Botnet targeting WordPress pods – Sysdig

Hidden Bugs in The Mines: Examining Vulnerabilities within Cryptocurrency Miners - Lacework -Lacework

Ryan MacDonald on LinkedIn: Vice Society ransomware uses new PowerShell data theft tool in attacks

Detecting KRACK Man in the Middle Attacks - Zimperium

DangerousPassword attacks targeting developers' Windows, macOS, and Linux environments - JPCERT/CC Eyes

XMRig Coin Miner: Adversaries Employ New Approaches to Illegal Crypto Mining - SOC Prime

Attack Trends Related to DangerousPassword - JPCERT/CC Eyes

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

Week 23 – 2023 – This Week In 4n6

Cryptojacking: ThinkPHP xmrig_s Monero Miner - Jamie Bowman