Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Publicly-accessible servers have been often targeted for attacks. In recent years, there are cases where these servers are compromised and embedded with a cryptocurrency mining tool. JPCERT/CC confirmed cases with XMRig [1] in February 2021. This article introduces the details

Log4JShell Used to Swarm VMware Servers with Miners, Backdoors - info database

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

Threat Group Cards PDF, PDF, Cyberwarfare

Exploring a crypto-mining campaign which used the Log4j vulnerability

Akamai Blog Threats Making WAVs - Incident Response to a Cryptomining Attack

The Anomali Blog

THREAT ALERT: Crypto miner attack - Sysrv-Hello Botnet targeting WordPress pods – Sysdig

Hidden Bugs in The Mines: Examining Vulnerabilities within Cryptocurrency Miners - Lacework -Lacework

Ryan MacDonald on LinkedIn: Vice Society ransomware uses new PowerShell data theft tool in attacks

How JPCERT/CC automates malware analysis

List of “2021”

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

How JPCERT/CC automates malware analysis