Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Publicly-accessible servers have been often targeted for attacks. In recent years, there are cases where these servers are compromised and embedded with a cryptocurrency mining tool. JPCERT/CC confirmed cases with XMRig [1] in February 2021. This article introduces the details

Large Scale Monero Cryptocurrency Mining Operation using XMRig

Ryan MacDonald on LinkedIn: Russia-Linked APT29 Uses New Malware in Embassy Attacks

Exploring a crypto-mining campaign which used the Log4j vulnerability

SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day A - vulnerability database

Infected WordPress Site Reveals Malicious C&C Script

SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day A - vulnerability database

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

2018-08-06 - XMRig coinminer caused by ad traffic leading to adobeupdater.mcdir.ru

How JPCERT/CC automates malware analysis

BLINDINGCAN - Malware Used by Lazarus - - JPCERT/CC Eyes

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Cryptojacking: ThinkPHP xmrig_s Monero Miner - Jamie Bowman