Broadcom

Wormable XMRig Cryptojacking Campaign Uses BYOVD Techniques

First seen 26 Feb 2026, 00:12 UTC • Securityaffairs.Co

•32.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A wormable cryptojacking campaign has been identified, leveraging pirated software to deploy a custom XMRig miner. The attack utilizes BYOVD techniques and incorporates a time-based logic bomb to enhance stealth and evade detection. Affected systems include those running counterfeit software packages that facilitate the infection process.

How this analysis works

Timeline

2026-02-23

Securityaffairs.Co reports on wormable XMRig campaign

2026-02-25

Broadcom reports on advanced cryptojacking operation

Attack Flow

Continue Reading

Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems Operation Endgame Disrupts Evil Corp's SocGholish Malware Network China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware ComfyUI Servers Compromised for Cryptomining and Botnet Operations PowMix Botnet Targets Czech Organizations with Malicious LNK Files Vidar Infostealer Targets SMBs with Malvertising Campaign

Wormable XMRig Cryptojacking Campaign Uses BYOVD Techniques

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading