Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration AbuseThe Hacker News·May 20, 08:25 UTC · May 20, 2025Malware in the wild157
Linux Malware Campaign “Migo” Targets Redis For CryptominingInfosecurity Magazine·Feb 20, 17:00 UTC · Feb 20, 2024Malware42
DDG, the second largest mining botnet targets Redis and OrientDB serversSecurity Affairs·Feb 2, 12:33 UTC · Feb 2, 2018MalwareCVE-2017-1146747
Linux Malware targets misconfigured misconfigured Apache Hadoop, Confluence, Docker, and Redis serversSecurity Affairs·Mar 7, 07:30 UTC · Mar 7, 2024Malware142
Linux Malware Targets Docker, Apache Hadoop, Redis and ConfluenceInfosecurity Magazine·Mar 6, 16:15 UTC · Mar 6, 2024MalwareCVE-2022-26134147
New Cryptojacking Malware Targeting Apache, Oracle, Redis ServersThe Hacker News·Feb 1, 11:15 UTC · Feb 1, 2021MalwareCVE-2016-3088CVE-2017-1027147
Vulnerable Apache Solr, Redis, Windows servers hit with cryptominersHelp Net Security·Mar 11, 21:07 UTC · Mar 11, 2018MalwareCVE-2017-12629CVE-2017-980547
Multi-Vector Miner+Tsunami Botnet with SSH Lateral MovementSecurity Affairs·Dec 2, 08:54 UTC · Dec 2, 2020MalwareCVE-2020-1488247
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes TokensThe Hacker News·Jul 17, 17:12 UTC · Jul 17, 2026MalwareCVE-2026-39987CVE-2026-41176CVE-2022-22947+1 CVEs47
New PumaBot Botnet Targets Linux IoT Devices to Steal SSH Credentials and Mine CryptoThe Hacker News·May 29, 05:11 UTC · May 29, 2025Malware42
Lemon_Duck cryptomining malware evolves to target Linux devicesSecurity Affairs·Aug 28, 09:07 UTC · Aug 28, 2020MalwareCVE-2017-8570CVE-2020-079647
Connecting the dots between recently active cryptominersCisco Talos·Dec 18, 16:33 UTC · Dec 18, 2018Malware42
‘CanisterWorm’ Springs Wiper Attack Targeting IranKrebs on Security·Mar 23, 19:04 UTC · Mar 23, 2026Malware42
Cryptojacking Gang TeamTNT Make a ComebackInfosecurity Magazine·Sep 19, 10:15 UTC · Sep 19, 2024Malware142
TeamTNT's Silentbob Botnet Infecting 196 Hosts in Cloud Attack CampaignThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2023Malware42
New Go-written GobRAT RAT targets Linux Routers in JapanSecurity Affairs·May 29, 13:44 UTC · May 29, 2023Malware42
TeamTNT Targeted Cloud Instances and Containerized Environments For Two YearsInfosecurity Magazine·Aug 26, 16:00 UTC · Aug 26, 2022Malware42
This Cloud Botnet Has Hijacked 30,000 Systems to Mine CryptocurrenciesThe Hacker News·Jul 25, 03:41 UTC · Jul 25, 2022MalwareCVE-2022-2613447
8220 Gang Cloud Botnet infected 30,000 host globallySecurity Affairs·Jul 21, 08:06 UTC · Jul 21, 2022MalwareCVE-2022-26134CVE-2019-272547
A Cryptomining botnet abuses Bitcoin blockchain transactions as C2 backup mechanismSecurity Affairs·Feb 24, 20:52 UTC · Feb 24, 2021MalwareCVE-2015-1427CVE-2019-908247
Doki, an undetectable Linux backdoor targets Docker ServersSecurity Affairs·Jul 29, 12:21 UTC · Jul 29, 2020Malware142
Xwo Malware scans the Internet for Exposed Services, Default PasswordsSecurity Affairs·Apr 5, 14:12 UTC · Apr 5, 2019Malware42
Week in review: New LTE attacks, Android P security, backdooring connected carsHelp Net Security·Mar 11, 00:00 UTC · Mar 11, 2018Malware42