Back Gbhackers

New CondiBot Variant and ‘Monaco’ Miner Target More Network Devices

Gbhackers •Mayura Kathir • March 17, 2026

Over the past few years, the enterprise attack surface has shifted decisively toward network infrastructure, with attackers increasingly abusing routers, VPNs, firewalls, and other edge devices for initial access and long‑term persistence. Research from Verizon and others has documented an almost eight‑fold rise in exploitation of network and edge devices in recent years, with these […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New CondiBot Variant and Monaco Miner Target Network Devices A new variant of CondiBot and the Monaco cryptominer are actively targeting network devices, including routers and firewalls, as attackers shift their focus to enterprise infrastructure. This trend has been noted in research showing an eight-fold increase in the exploitation of such devices over recent years. The attacks are attributed to a range of actors, from nation-state groups to financially motivated criminals. The CondiBot variant exploits vulnerabilities in network devices, allowing for initial access and long-term persistence within enterprise environments. The Monaco miner is also being deployed to leverage compromised devices for cryptomining activities. Organizations relying on network infrastructure are particularly vulnerable, as these devices are integral to their operations. Current mitigation strategies are not specified, indicating a pressing need for heightened security measures. 2 sources 67

New CondiBot Variant and ‘Monaco’ Miner Target More Network Devices

The full story

Extracted Entities

Attack Types (1)

Malware (2)