Cybersecurity researchers have identified two major threat campaigns targeting enterprise systems. The first exploits CVE-2021-41773 in Apache HTTP Server to distribute Linuxsys cryptocurrency miners, using compromised legitimate websites for distribution and targeting both Linux and Windo...
Researchers at Wiz have uncovered an ongoing campaign by threat actor JINX-0126 targeting vulnerable PostgreSQL databases to deploy cryptocurrency mining malware. The operation, an evolution of the PG_MEM campaign, employs sophisticated evasion techniques including unique hash signatures, ...
A sophisticated cryptocurrency mining campaign named StaryDobry targets gaming PCs through trojanized game installers, affecting users primarily in Russia, Brazil, Germany, Belarus, and Kazakhstan. The malware, distributed via torrent sites, specifically targets high-performance gaming com...
Critical vulnerability CVE-2024-50603 in Aviatrix Controller systems (versions 7.x-7.2.4820) is being actively exploited to deploy backdoors and crypto miners. The flaw allows unauthenticated remote command execution through API requests, with attackers installing Sliver backdoors and XMRi...
CrowdStrike reveals a sophisticated phishing campaign misusing their brand to distribute crypto mining malware through fake job recruitment emails. The scam tricks victims into downloading malware disguised as a CRM application, which deploys the XMRig cryptocurrency miner. A parallel thre...
