Attacks Embedding XMRig on Compromised Servers - JPCERT/CC Eyes

Publicly-accessible servers have been often targeted for attacks. In recent years, there are cases where these servers are compromised and embedded with a cryptocurrency mining tool. JPCERT/CC confirmed cases with XMRig [1] in February 2021. This article introduces the details

THREAT ALERT: Crypto miner attack - Sysrv-Hello Botnet targeting WordPress pods – Sysdig

Hidden Bugs in The Mines: Examining Vulnerabilities within Cryptocurrency Miners - Lacework -Lacework

Akamai Blog Threats Making WAVs - Incident Response to a Cryptomining Attack

THREAT ALERT: Crypto miner attack - Sysrv-Hello Botnet targeting WordPress pods – Sysdig

2018-08-06 - XMRig coinminer caused by ad traffic leading to adobeupdater.mcdir.ru

Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers

SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day A - vulnerability database

The Anomali Blog

Akamai Blog Threats Making WAVs - Incident Response to a Cryptomining Attack