Group-IB uncovered XMRig Linux PAM abuse that lets a fileless Monero miner regenerate across user accounts and vanish from disk forensics.
#XMRig #CryptoMining #LinuxSecurity #PAMabuse #FilelessMalware
#XMRig #CryptoMining #LinuxSecurity #PAMabuse #FilelessMalware
XMRig Botnet Abuses Linux PAM to Spread Forensic Smokescreen Across User Accounts
At a glance
securityonline.info
August 5, 2026 at 7:11 AM
Group-IB uncovered XMRig Linux PAM abuse that lets a fileless Monero miner regenerate across user accounts and vanish from disk forensics.
#XMRig #CryptoMining #LinuxSecurity #PAMabuse #FilelessMalware
#XMRig #CryptoMining #LinuxSecurity #PAMabuse #FilelessMalware