XMR crypto miner switches from arm IoT devices to X86/I686 Intel servers
Security Affairs
SEPTEMBER 2, 2019
The malware attempt to connect via SSH on Port 22 and deliver itself as a gzip archive. “The malware is uploaded as gzip compressed tarball archives of binaries, scripts, and libraries. ” The expert discovered that the script executes init2, that is one of the files in the gzip archive, if the directory.
Let's personalize your content