June 21, 2023

Beware bad passwords as attackers co-opt Linux servers into cybercrime

Did you prevent password-only logins on your SSH servers? On ALL of them? Are you sure about that?

Naked Security

June 15, 2022

Telerik UI exploitation leads to cryptominer, Cobalt Strike infections

Attacker targets bugs in a popular web application graphical interface development tool

Security OperationsThreat Research

October 24, 2021

Node poisoning: hijacked package delivers coin miner and credential-stealing backdoor

A hacked NPM account was used to deliver Linux and Windows Monero miners and Windows credential-stealing malware along with a popular node.js library.

SophosLabs UncutThreat Research

January 21, 2021

MrbMiner: Cryptojacking to bypass international sanctions

Iran-based "garage startup" cryptojacking operation targets SQL servers

SophosLabs UncutThreat Research

June 24, 2020

Glupteba malware hides in plain sight

A worm focused on concealment and stealth may keep malware payloads hidden from view

SophosLabs Uncut

June 09, 2020

Kingminer escalates attack complexity for cryptomining

SophosLabs UncutThreat Research

May 30, 2019

The cryptominer that kept coming back

A Monero cryptominer made a home on an Apache Tomcat server and just wouldn't stay away.

Naked Security

September 24, 2018

Cryptojacking apps return to Google Play Market

At least 25 Android apps on the official Google Play store contain code that mines cryptocurrencies in the background.

MalwarePostsProducts & ServicesSmartphonesSophosLabs UncutThreat Research