article thumbnail

Outlaw is Back, a New Crypto-Botnet Targets European Organizations

Security Affairs

The script looks like the following: Figure 5: Content of the “a” file. The executed crypto miner is the file named “” kswapd0 ” based on the famous XMRIG monero crypto miner. It is composed only by three files: “ a”, “run”, “stop ”. The initial script is the file named “ a ”. This is the “ Stage 1 ”.

Mining 103