Alleged Wagyu.xyz leak links Monero swaps to IPs
Researchers reviewed an unverified export with 38,628 orders and 10,139 IP addresses covering July 18 to October 26, 2026.
1
Stories per day · 30 days
2 RSS
Relatedcryptocurrency2data-leak2privacy2ai-agents1cryptomining1honeypot1llmjacking1mcp1wagyu1whitearmor1
12 stories, newest first · one card per story
Stories tagged #monero
Alleged Wagyu leak links 4,580 swaps to Monero addresses and IPs
Hudson Rock has not authenticated the files, and WhiteArmor listings do not prove intrusion or ransomware.
1
Symantec honeypot captures AI agent built for autonomous attacks
Instructions covered up to 100,000 actions, including scanning, credential theft and Monero mining, and were not executed.
1
Apple and a Hacker's Future
Attackers are exploiting macOS screen-sharing flaw CVE-2026-65400 on exposed port 5900 to install Monero miners.
6
Hackers Used a Samsung Flaw to Build a Cryptominer Inside Victim Systems
Huntress says attackers used Samsung MagicINFO CVE-2025-4632 on one Windows host to compile a Monero miner.
The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint
Huntress details attackers exploiting Samsung MagicINFO CVE-2025-4632 to install AnyDesk and compile an XMR cryptominer directly on the endpoint.
2
Are Unreachable Nodes Truly Safe? Fully Eclipsing Monero's P2P Network!
Researchers present Nyx and Moros, the first eclipse attacks against Monero nodes behind NATs, requiring no inbound access and demonstrated on mainnet.
Hackers Turn More Than 3,500 Redis Servers Into Cryptocurrency Miners
Hunters.io researchers report 3,562 exposed Redis servers hijacked via replication abuse into Monero cryptomining, causing performance loss and data-integrity risk.
3
Massive Redis Cryptojacking Campaign Hijacks Thousands of Linux Servers
RedisRaider cryptojacking campaign compromises thousands of exposed, unauthenticated Linux Redis servers using cron persistence to deploy XMRig Monero miners.
6
Apple macOS Screen Sharing Flaw Exploited on Internet
Actively exploited CVE-2026-65400 in macOS Screen Sharing grants pre-auth root access; attackers deploy Monero miners on exposed systems.
2
Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer
Attackers actively exploit patched macOS Screen Sharing bug CVE-2026-65400 on systems with port 5900 exposed, gaining root to install a Monero cryptominer.
1
macOS Screen Sharing Flaw Exploited to Deploy Monero Miners
Dutch NCSC confirms active exploitation of critical macOS Screen Sharing flaw CVE-2026-65400, granting root access and installing Monero miners.
1