Skip to main content

Tag: cryptominer

3 articles

Rows of computer servers and networking equipment in a brightly-lit data center with a single unoccupied workstation in the…

Cryptominer Exploits Linux PAM to Evade Detection

Cybercriminals have found a sneaky way to evade detection by exploiting Linux PAM, using a trusted third-party relationship as a backdoor to spread a Monero mining campaign. By abusing the pam_rootok policy, they can impersonate multiple standard accounts without needing passwords, creating a forensic smokescreen.

Analyst 207
Concerned gamer sits at desk surrounded by peripherals, puzzled by laptop screen showing Steam forum page.

Steam Forum Abused in ClickFix Attacks Spreading XMRig Cryptominers

Cyber attackers are exploiting Steam's forum by creating fake accounts that offer 'helpful' fixes to users with game issues, tricking them into downloading and installing a notorious XMRig cryptominer. This sneaky tactic uses a PowerShell script to quietly install the malware as a persistent Windows service.

Analyst 207
Windows computer workstation with browser open, surrounded by technical books and office supplies.

Hola Browser Compromised to Deliver Cryptominer in Supply Chain Attack

Hola's CEO, Avi Raz Cohen, assured users that the company has taken swift action to prevent future breaches, rebuilding its distribution pipeline and implementing robust security measures. The move comes after a supply chain attack compromised the Hola Browser, secretly delivering a cryptominer to unsuspecting users.

Analyst 207