Chaos RAT Added To Linux Cryptocurrency Mining Attacks
A cryptocurrency mining operation was discovered incorporating the Chaos Remote Administrative Tool into its arsenal.
The malicious software alters the crontab file to maintain persistence and downloads an XMRig miner onto infected devices.
To remain active and spread to as many devices as possible the main downloader script and further payloads are hosted in different locations.
Featured Resources
View More Resources
blog
MITRE ATT&CK v19 Unpacked: What Changed and How to Operationalize
MITRE ATT&CK v19 introduces major changes that reshape how organizations understand and validate adversary behavior, including retiring the Defense Evasion tactic and introducing Stealth and Defense Impairment tactics.
Cymulate Event
CymuLab Live: A Hands-On Lab
Cymulate Event