RedisRaider malware exploits misconfigured Redis servers to deploy cryptominers via cron jobs, evading detection with obfuscation and anti-forensics.

Threat actors are using the PyBitmessage protocol as a stealthy C2 channel to hide a Monero coinminer and backdoor, evading detection.

Wiz uncovers JINX-0132, a cryptojacking campaign exploiting misconfigured Nomad, Consul, Docker, and Gitea in DevOps environments to mine Monero.

Splunk exposes a campaign weaponizing Inno Setup installers to deploy RedLine Stealer, using obfuscated Pascal scripts and HijackLoader to steal browser/crypto data.

XMRig cryptojacking is surging, leveraging LOLBAS techniques, PowerShell, and Scheduled Tasks to mine Monero undetected, with a 45% rally in XMR price driving the attacks.

Abacus Market, once the largest Western darknet marketplace, has disappeared with an estimated $300M+ in crypto. Users suspect an exit scam, but a covert law enforcement operation isn't ruled out.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

McAfee uncovers a new Android malware campaign targeting Indian users. The malware impersonates major banks to steal financial data and silently mines Monero in the background.

The privacy coin Monero suffers a 51% attack from the Qubic mining pool, leading to a block reorganization, suspended withdrawals, and a price drop.

The September 14th Nightmare