Security experts have discovered a malware campaign, known as RedisRaider, which exploits misconfigured Redis servers to stealthily mine cryptocurrency. The malware spreads by exploiting weak configurations, subsequently deploying the XMRig Monero miner on compromised Linux systems. The malware is written in Go and heavily obfuscated using a tool called Garble, which makes it difficult to detect and analyze. Security firm Datadog discovered the operation and identified additional components of the attack including a web-based Monero miner.
Microsoft takes legal action against infostealer Lumma
Microsoft has taken legal action against the information-stealing malware Lumma Stealer, blocking nearly 2,300 related websites. The US Department of Justice seized Lumma’s central command