Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Publicly-accessible servers have been often targeted for attacks. In recent years, there are cases where these servers are compromised and embedded with a cryptocurrency mining tool. JPCERT/CC confirmed cases with XMRig [1] in February 2021. This article introduces the details

2018-08-06 - XMRig coinminer caused by ad traffic leading to adobeupdater.mcdir.ru

Akamai Blog Threats Making WAVs - Incident Response to a Cryptomining Attack

Critical Magento Holes Open Online Shops to Code Execution - vulnerability database

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

List of “2021”

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

List of “増渕 維摩(Yuma Masubuchi)” - JPCERT/CC Eyes

Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Hidden Bugs in The Mines: Examining Vulnerabilities within Cryptocurrency Miners - Lacework -Lacework

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

The Anomali Blog

Threat Group Cards PDF, PDF, Cyberwarfare