Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Publicly-accessible servers have been often targeted for attacks. In recent years, there are cases where these servers are compromised and embedded with a cryptocurrency mining tool. JPCERT/CC confirmed cases with XMRig [1] in February 2021. This article introduces the details

Exploring a crypto-mining campaign which used the Log4j vulnerability

Akamai Blog Threats Making WAVs - Incident Response to a Cryptomining Attack

Hidden Bugs in The Mines: Examining Vulnerabilities within Cryptocurrency Miners - Lacework -Lacework

List of “2021”

THREAT ALERT: Crypto miner attack - Sysrv-Hello Botnet targeting WordPress pods – Sysdig

Hidden Bugs in The Mines: Examining Vulnerabilities within Cryptocurrency Miners - Lacework -Lacework

SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day A - vulnerability database

Infected WordPress Site Reveals Malicious C&C Script

THREAT ALERT: Crypto miner attack - Sysrv-Hello Botnet targeting WordPress pods – Sysdig

Exploring a crypto-mining campaign which used the Log4j vulnerability

Ssh Brute Force Tool Windows Download - Colaboratory

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers