The Mimo threat actor has broadened its scope to Magento, employing advanced persistence, fileless execution, cryptojacking, and proxyjacking in a sophisticated new campaign.

Wiz Research uncovers Soco404, an evolving cryptojacking operation exploiting cloud misconfigurations and PostgreSQL to stealthily mine cryptocurrency across Linux and Windows.

The Mimo cybercriminal group has evolved, now targeting Magento and misconfigured Docker instances with sophisticated cryptojacking and proxyjacking techniques, leveraging fileless execution and rootkits.

Aqua Security's Nautilus team discovered Koske, an advanced Linux cryptojacker likely crafted by AI, hiding in panda images and using rootkits for stealthy operations.

AquaSec uncovers Koske, a new cryptojacking malware potentially AI-generated, hiding in innocent-looking images to silently infect Linux servers and evade detection with rootkit stealth.

McAfee uncovers a new Android malware campaign targeting Indian users. The malware impersonates major banks to steal financial data and silently mines Monero in the background.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

“Our sales POS froze for 17 seconds. When it came back online, our electricity bill was 4x higher the next month.”

The TOR-based Cryptojacking Attack has begun spreading through misconfigured Docker APIs. Attackers use the TOR network to install the…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread