Chaos RAT Added To Linux Cryptocurrency Mining Attacks
A cryptocurrency mining operation was discovered incorporating the Chaos Remote Administrative Tool into its arsenal.
The malicious software alters the crontab file to maintain persistence and downloads an XMRig miner onto infected devices.
To remain active and spread to as many devices as possible the main downloader script and further payloads are hosted in different locations.
Featured Resources
View More Resources
blog
Handala Hack: From Regional Disruption to Digital Destruction — Why Security Validation Matters Now
After years of battling ransomware and financially motivated threats, security teams must now increase their focus to defend against digital destruction. Iranian-backed Handala Hack highlighted the growing threat with its claimed attacks against a U.S.-based medical equipment maker, with reports of widespread deletion of data
blog
CVE-2026-26117: Hijacking Azure Arc on Windows for Local Privilege Escalation & Cloud Identity Takeover
CVE-2026-26117 lets attackers hijack Azure Arc on Windows, escalate to SYSTEM, and seize the machine’s cloud identity.
Demo
Exposure Validation Demo
Demo of automated offensive simulations validating detection, prevention, and IOC coverage