Broadcom Wormable XMRig Cryptojacking Campaign Uses BYOVD Techniques
Article Content
Browse articles 
A wormable cryptojacking campaign has been identified, leveraging pirated software to deploy a custom XMRig miner. The attack utilizes BYOVD techniques and incorporates a time-based logic bomb to enhance stealth and evade detection. Affected systems include those running counterfeit software packages that facilitate the infection process.
Ask AI about this cluster
Answers cite the sources they use
Updated 213d ago How this analysis works
Timeline
2026-02-23
Securityaffairs.Co reports on wormable XMRig campaign
2026-02-25
Broadcom reports on advanced cryptojacking operation
More articles in this cluster (2)
Following this threat?
Track XMRig in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Human Attacker Exploits Marimo RCE at Machine Speed A human attacker exploited CVE-2026-39987, a pre-authentication remote code execution vulnerability in Marimo notebooks, achieving a rapid transition from an open WebSocket to SSH access in just eight seconds. The attacker utilized a hand-rolled Python toolkit, bypassing detection mechanisms designed for AI-driven… 
Critical AhsayCBS Vulnerabilities Exploited for RCE and Crypto Mining Cybersecurity firm Huntress has reported of two critical vulnerabilities in AhsayCBS, a cloud backup server management console used by managed service providers. The vulnerabilities, CVE-2026-105133 and CVE-2026-105134, were disclosed on October 4, 2026, and allow unauthenticated remote code execution (RCE) by…