Chaos RAT Added To Linux Cryptocurrency Mining Attacks
A cryptocurrency mining operation was discovered incorporating the Chaos Remote Administrative Tool into its arsenal.
The malicious software alters the crontab file to maintain persistence and downloads an XMRig miner onto infected devices.
To remain active and spread to as many devices as possible the main downloader script and further payloads are hosted in different locations.
Featured Resources
View More Resources
blog
When Monitored Content Strikes Back: Account Takeover in Microsoft Purview
Cymulate found a stored XSS flaw in Microsoft Purview that exposed reviewer tokens and enabled privileged account takeover.
blog
Cymulate Launches MCP Server and Claude Plugin
How Cymulate transforms exposure validation from a destination platform into an AI-native security capability Security teams have more data than ever before, but
blog
Cymulate Cowork: Engineering Cyber Defenses at Machine Speed
Cymulate Cowork uses agentic AI to automate exposure validation, prioritize risk and accelerate cyber defense workflows.