Back Cybersecuritynews

New CondiBot Variant and ‘Monaco’ Cryptominer Expand Threats to Network Devices

Cybersecuritynews •Tushar Subhra Dutta • March 17, 2026

Network infrastructure has become one of the most targeted areas in today’s threat landscape. Over recent years, attackers ranging from nation-state groups to financially driven criminal actors have steadily shifted their focus toward routers, firewalls, and other network devices. These devices sit at the core of enterprise environments, making them ideal entry points for long-term […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New CondiBot Variant and Monaco Miner Target Network Devices A new variant of CondiBot and the Monaco cryptominer are actively targeting network devices, including routers and firewalls, as attackers shift their focus to enterprise infrastructure. This trend has been noted in research showing an eight-fold increase in the exploitation of such devices over recent years. The attacks are attributed to a range of actors, from nation-state groups to financially motivated criminals. The CondiBot variant exploits vulnerabilities in network devices, allowing for initial access and long-term persistence within enterprise environments. The Monaco miner is also being deployed to leverage compromised devices for cryptomining activities. Organizations relying on network infrastructure are particularly vulnerable, as these devices are integral to their operations. Current mitigation strategies are not specified, indicating a pressing need for heightened security measures. 2 sources 67

New CondiBot Variant and ‘Monaco’ Cryptominer Expand Threats to Network Devices

The full story

Extracted Entities

Attack Types (1)

Malware (2)