#CVE_2020_14979
This miner never writes a file - it lives in the Registry and hides its C2 in a PNG and WAV. https://intel.threadlinqs.com/threat/TL-2026-2593 #ThreatIntel #CVE_2020_14979 #xmrig #WinRing0sys
September 20, 2026 at 11:31 PM