WinRing0

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 19, 2026
Last mentionedOct 8, 2026

Timeline

2 articles · newest first

Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

Huntress saw attackers chain two AhsayCBS flaws for SYSTEM RCE, webshells, and XMRig mining.

HuntressOct 8, 20:00 UTC · Oct 8, 2026Exploit / PoCExploitedCVE-2026-105133 CVE-2026-1051346 · 3 reads

PowerShell Malware Abuses Registry and DNS TXT Records to Deploy XMRig Crypto Miner

K7 Security Labs dissected a PowerShell cryptomining chain hiding payloads in registry, DNS TXT records, PNG pixels and WAV files to deploy XMRig.

GBHackersSep 19, 07:11 UTC · Sep 19, 2026MalwareExploited4

Related CVEs

by mentions

CVE-2026-10513482%10.0
Unauthenticated OS Command Injection in AhsayCBS
published Oct 4, 2026AhsayCBSKEVPoC
CVE-2026-10513384%6.9
Improper authentication in Ahsay AhsayCBS API
published Oct 4, 2026AhsayCBSKEV

Appears with

XMRigmalware · 2
K7 Security Labsvendor · 1
NSSMproduct · 1
Ahsayvendor · 1
AhsayCBSproduct · 1
Microsoft Defenderproduct · 1
K7 Security Labsorganization · 1
XMRigproduct · 1
Ahsay Systemsorganization · 1
Huntressorganization · 1

Entities are extracted by the model from each article. First seen Sep 19, 2026, last mentioned Oct 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.