SecuriTricks - cryptominer

From Dormant to Dangerous: P2Pinfect Evolves to Deploy New Ransomware and Cryptominer

P2Pinfect is a sophisticated malware that utilizes a peer-to-peer botnet for command and control. Initially appearing dormant, it has evolved to deploy ransomware and cryptominer payloads. The malware spreads via exploiting Redis and limited SSH capabilities. A recent update introduced a new ransom…

ransomware

rootkit

Published: June 27, 2024

Downloadable IOCs: 15

RedTail Cryptominer Threat Actors Adopt PAN-OS CVE-2024-3400 Exploit

Threat actors behind the RedTail cryptomining malware, initially reported in early 2024, have incorporated the recent Palo Alto PAN-OS CVE-2024-3400 vulnerability into their toolkit. The malware spreads by using at least six different web exploits, targeting Internet of Things (IoT) devices (such a…

cryptominer

2024-05-31

ssl-vpns

Published: May 31, 2024

Linked vulnerabilities : CVE-2024-21887, CVE-2023-46805, CVE-2024-3400

Downloadable IOCs: 10

Distribution of Malware Under the Guise of MS Office Cracked Versions (XMRig, OrcusRAT, etc.)

The report analyzes a campaign where threat actors distribute various malware strains like RATs, coinminers, and loaders disguised as cracked versions of popular software. South Korean systems are heavily targeted, with malware persisting via scheduled tasks and evading security products. Detailed …

Published: May 30, 2024

Downloadable IOCs: 11

Malware (XMRig, OrcusRAT, etc.) disguised as MS Office crack

The report details an ongoing malware campaign targeting South Korean users, which disguises malicious payloads as cracked versions of Microsoft Office and other popular software. The attackers are distributing a variety of malware, including downloaders, coin miners, remote access tools (RATs), pr…

Published: May 10, 2024

Downloadable IOCs: 12

Tag: cryptominer

Attack reports

Resurgence of the Prometei Botnet

Recruitment Phishing Scam Imitates Hiring Process

From Perfctl to InfoStealer

CVE-2024-4577 Exploits in the Wild One Day After Disclosure

Turning Jenkins Into a Cryptomining Machine From an Attacker's Perspective

Examining Water Infection Routine Leading to an XMRig Cryptominer

From Dormant to Dangerous: P2Pinfect Evolves to Deploy New Ransomware and Cryptominer

RedTail Cryptominer Threat Actors Adopt PAN-OS CVE-2024-3400 Exploit

Distribution of Malware Under the Guise of MS Office Cracked Versions (XMRig, OrcusRAT, etc.)

Malware (XMRig, OrcusRAT, etc.) disguised as MS Office crack