Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Publicly-accessible servers have been often targeted for attacks. In recent years, there are cases where these servers are compromised and embedded with a cryptocurrency mining tool. JPCERT/CC confirmed cases with XMRig [1] in February 2021. This article introduces the details

Cryptojacking: ThinkPHP xmrig_s Monero Miner - Jamie Bowman

Infected WordPress Site Reveals Malicious C&C Script

Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

The Anomali Blog

Large Scale Monero Cryptocurrency Mining Operation using XMRig

Infected WordPress Site Reveals Malicious C&C Script

DangerousPassword attacks targeting developers' Windows, macOS, and Linux environments - JPCERT/CC Eyes

THREAT ALERT: Crypto miner attack - Sysrv-Hello Botnet targeting WordPress pods – Sysdig

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

Ryan MacDonald on LinkedIn: Russia-Linked APT29 Uses New Malware in Embassy Attacks

Cryptojacking: ThinkPHP xmrig_s Monero Miner - Jamie Bowman