Skip to content
Crypto Mining Malware Exploits External Drives and Air-Gapped Systems

Crypto Mining Malware Exploits External Drives and Air-Gapped Systems

First seen 19 Feb 2026, 09:21 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

A sophisticated cryptocurrency mining malware campaign has been identified, targeting systems via external storage devices and capable of infecting air-gapped environments. The malware focuses on mining Monero and utilizes advanced techniques, including kernel-level exploitation and worm-like propagation to maintain persistence and resist removal.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

Timeline

2026-02-19
Malware campaign reported targeting external drives and air-gapped systems

More articles in this cluster (3)