A financially motivated threat actor called Mimo is exploiting CVE-2025-32432, a critical RCE vulnerability in Craft CMS, to deploy cryptojacking operations. After gaining access through the vulnerability, attackers install a web shell that downloads a malicious script, which removes compe...
Researchers at Wiz have uncovered an ongoing campaign by threat actor JINX-0126 targeting vulnerable PostgreSQL databases to deploy cryptocurrency mining malware. The operation, an evolution of the PG_MEM campaign, employs sophisticated evasion techniques including unique hash signatures, ...
CrowdStrike reveals a sophisticated phishing campaign misusing their brand to distribute crypto mining malware through fake job recruitment emails. The scam tricks victims into downloading malware disguised as a CRM application, which deploys the XMRig cryptocurrency miner. A parallel thre...
