XMRig

PowMix Botnet Targets Czech Organizations with Malicious LNK Files

Covert Linux XMRig Campaign Exploits PAM for Cryptomining

Vidar Infostealer Targets SMBs with Malvertising Campaign

OpenWebUI Servers Hijacked for Crypto Mining and Data Theft

BengalSEO Campaign Delivers Malware via SEO Poisoning

OpenAI Codex Fails to Mitigate Linux Threats During Cyber Incident

GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension

Hola Browser Compromised to Deliver Cryptominer via Supply Chain Attack

Cryptomining Attack Exploits AI Gateway Vulnerabilities in AWS

ShadowRay 2.0 Campaign: AI-Driven Botnet Exploits Open-Source Vulnerability

Aeternum Botnet Leverages Polygon Smart Contracts for Resilience

ClickFix Scam: Users Self-Install Malware via Social Engineering

New Linux Malware Combines Mirai Botnet with Fileless Cryptominer

BeatBanker Android Malware Targets Brazilian Users via Fake Starlink App

Phishing Campaign Spoofs Ukrainian CERT to Deploy AGEWHEEZE RAT

Hackers Exploit Misconfigured Cloud Training Apps in Fortune 500 Firms

ShadowRay 2.0 Campaign Exploits Ray Clusters for Crypto Mining

USB-based CoinMiner Malware Targets South Korean Workstations

Malicious sympy-dev Package Targets SymPy Users with Cryptomining Malware

Wormable XMRig Cryptojacking Campaign Uses BYOVD Techniques

AI-Generated React2Shell Malware Discovered by Researchers

ShadowRay 2.0 Campaign Targets Vulnerable Ray Clusters for Cryptomining

North Korean Hackers Weaponize VS Code in Contagious Interview Campaign

XMRig Covert Ops: The Cryptomining Campaign That Abuses Trusted Access and Deploys ...

China-Nexus Hackers Breached Hospital X-Rays, Embassy, and Congress With New ...

AI Gateways Offer Attackers the Keys to the Kingdom

Attack on Amazon Bedrock

Vidar Infostealer Hammers SMBs via Malvertising Campaign

New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner

StealC infrastructure takedown assisted by AI analysis, C2 infiltration

StealC you later: Proofpoint and IBM X

GitHub confirms breach of 3,800 repos via malicious VSCode extension

Frequently asked questions about the continued exploitation of Cisco Catalyst SD-WAN vulnerabilities (CVE-2026-20182)

Ongoing exploitation of Cisco Catalyst SD

Codex Red: Untangling a Linux Incident With an OpenAI Twist (Part 2)

Nascent PowMix botnet covertly compromises Czech workforce | brief

UAC

ComfyUI instances hijacked for cryptomining and proxy botnet | brief

ComfyUI servers: Attackers turn instances into a cryptominer proxy botnet

Malicious campaign targeting vulnerable OpenWebUI servers: technical analysis

New BeatBanker Android malware poses as Starlink app to hijack devices

XMRig delivery campaign leverages BYOVD techniques

Wormable XMRig campaign leverages BYOVD and timed kill switch for stealth

AI-generated React2Shell malware infects 90-plus hosts

AI/LLM-Generated Malware Used to Exploit React2Shell

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

VS Code projects weaponized in developer

Hackers exploit security testing apps to breach Fortune 500 firms

USB-based CoinMiner malware delivery persists

CoinMiner USB Malware Continues to Spread in Korea

New Linux malware merges Mirai botnet with fileless cryptominer

New Stealthy Linux Malware Combines Mirai DDoS Botnet with Cryptominer

Cryptomining Campaign Exploiting Exposed Ray AI Infrastructure (Campaign)

New ShadowRay attacks convert Ray clusters into crypto miners