Hackers Exploiting Microsoft Servers to Mine MoneroThe Hacker News·Sep 28, 17:28 UTC · Sep 28, 2017VulnerabilityCVE-2017-726935
Crooks hacked Microsoft servers to mine Monero, they earned $63K in 3 monthsSecurity Affairs·Oct 1, 13:14 UTC · Oct 1, 2017VulnerabilityCVE-2017-726935
Hackers find unpatched servers to secretly mine $17,000 in Monero per monthCyberScoop·Sep 28, 16:57 UTC · Sep 28, 2017Vulnerability in the wildCVE-2017-729660
Blue Mockingbird MoneroSecurity Affairs·May 10, 20:17 UTC · May 10, 2020VulnerabilityCVE-2019-1893547
TeamTNT Actively Enumerating Cloud Environments to Infiltrate OrganizationsPalo Alto Unit 42·Jun 6, 12:35 UTC · Jun 6, 2024Vulnerability30
Rocke: The Champion of Monero MinersCisco Talos·Aug 30, 15:26 UTC · Aug 30, 2018VulnerabilityCVE-2017-10271CVE-2017-306660
Crooks exploit CVE-2018-7602 Drupal flaw, aka Drupalgeddon3 to deliver Monero minerSecurity Affairs·Jun 22, 17:19 UTC · Jun 22, 2018VulnerabilityCVE-2018-7602CVE-2018-7600CVE-2014-0160+3 CVEs60
TeamTNT Deploys Malicious Docker Image On Docker HubSecurity Affairs·Oct 18, 19:50 UTC · Oct 18, 2021Vulnerability130
Watchbog and the Importance of PatchingCisco Talos·Sep 11, 16:10 UTC · Sep 11, 2019VulnerabilityCVE-2018-100086135
Necro Python bot adds new exploits and Tezos mining to its bag of tricksCisco Talos·Jun 3, 12:00 UTC · Jun 3, 2021VulnerabilityCVE-2021-3129CVE-2020-14882CVE-2017-014447
BlackBerry Mobile Website hacked, crooks installed a Coinhive’s code to mine MoneroSecurity Affairs·Jan 8, 10:07 UTC · Jan 8, 2018Vulnerability55
Experts analyzed an Advanced 'all in memory' CryptoWormSecurity Affairs·Oct 1, 13:17 UTC · Oct 1, 2017Vulnerability30
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App EndpointsThe Hacker News·Jun 30, 15:47 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-33017CVE-2025-3248160
Hacker free-for-all fights for control of home and office routers everywhereArs Technica · Security·May 2, 00:20 UTC · May 2, 2024Vulnerability42
Monero-mining botnet targets orgs through recent MS Exchange vulnerabilitiesHelp Net Security·Apr 22, 00:00 UTC · Apr 22, 2021VulnerabilityCVE-2021-27065CVE-2021-2685847
Neptune exploit kit used to deliver Monero cryptocurrency minersSecurity Affairs·Aug 23, 08:10 UTC · Aug 23, 2017VulnerabilityCVE-2016-0189CVE-2015-2419CVE-2014-6332+2 CVEs35
Unpatched Microsoft Exchange Servers hit with cryptojackingCyberScoop·Apr 14, 15:47 UTC · Apr 14, 2021Vulnerability in the wild60
Hackers Favorite CoinHive Cryptocurrency Mining Service Shutting DownThe Hacker News·Feb 28, 10:59 UTC · Feb 28, 2019Vulnerability42
JenkinsMiner made $3.4 million in a few months by compromising Jenkins serversSecurity Affairs·Feb 18, 19:37 UTC · Feb 18, 2018VulnerabilityCVE-2017-100035347
Cloud-Based Cryptocurrency mining attacks abuse GitHub Actions and Azure VMSecurity Affairs·Jul 12, 07:26 UTC · Jul 12, 2022Vulnerability42
Necro Python bot now enhanced with new VMWare, server exploitsSecurity Affairs·Jun 4, 18:17 UTC · Jun 4, 2021VulnerabilityCVE-2017-0144CVE-2017-014735
New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installsSecurity Affairs·Jan 31, 11:27 UTC · Jan 31, 2021VulnerabilityCVE-2017-10271CVE-2016-308860
Vulnerability Spotlight: Epee Levin Packet Deserialization Code Execution VulnerabilityCisco Talos·Sep 25, 17:21 UTC · Sep 25, 2018Vulnerability in the wildCVE-2018-397260
Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency MinersThe Hacker News·Apr 18, 09:50 UTC · Apr 18, 2018Vulnerability in the wildCVE-2018-7600CVE-2017-1027160
Cryptojacking Group TeamTNT Suspected of Using Decoy Miner to Conceal Data ExfiltrationThe Hacker News·Mar 18, 05:01 UTC · Mar 18, 2023Vulnerability30
UK Crypto Firm Loses $200m in CyberInfosecurity Magazine·Mar 14, 10:00 UTC · Mar 14, 2023Vulnerability30
8220 Gang used new ScrubCrypt crypter in cryptojacking attacksSecurity Affairs·Mar 9, 10:55 UTC · Mar 9, 2023Vulnerability30
Hackers Targeting WebLogic Servers and Docker APIs for Mining CryptocurrenciesThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2022Vulnerability in the wildCVE-2022-26134CVE-2020-14882160
Log4j Vulnerability AftermathSecurity Affairs·Dec 21, 08:04 UTC · Dec 21, 2021Vulnerability in the wildCVE-2021-44228160
Prometei Botnet Exploiting Unpatched Microsoft Exchange ServersThe Hacker News·Apr 23, 15:00 UTC · Apr 23, 2021VulnerabilityCVE-2021-27065CVE-2021-2685847
FreakOut! Ongoing Botnet Attack Exploiting Recent Linux VulnerabilitiesThe Hacker News·Jan 19, 13:40 UTC · Jan 19, 2021VulnerabilityCVE-2020-28188CVE-2021-3007CVE-2020-796160
Friday Squid Blogging: "How the Squid Lost Its Shell"Schneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
Coinhive stops digging, but cryptomining still dominatesHelp Net Security·Apr 10, 00:00 UTC · Apr 10, 2019Vulnerability in the wildCVE-2017-7269CVE-2014-0160CVE-2014-034660
Android Debugging Tools Also Useful for Compromising Devices, CryptominingSecurity Affairs·Jul 24, 17:36 UTC · Jul 24, 2018Vulnerability30
PyRoMineIoT spreads via EternalRomance exploit and targets targets IoT devices in Iran and Saudi Arabia.Security Affairs·Jun 15, 10:03 UTC · Jun 15, 2018Vulnerability42
Prowli Operation - Crooks already compromised over 40,000 servers and IoT DevicesSecurity Affairs·Jun 7, 06:27 UTC · Jun 7, 2018VulnerabilityCVE-2018-7482CVE-2014-262347
Week in review: Meltdown, Spectre, online tracking, and cryptojackingHelp Net Security·Jan 7, 00:00 UTC · Jan 7, 2018Vulnerability55