Denonia campaign (Campaign)
ID: 33a317e5-38ff-53a5-8716-af33ff4df7bb
STIX ID: report--33a317e5-38ff-53a5-8716-af33ff4df7bb
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2022-04-06
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
Denonia is a newly disclosed malware targeting AWS Lambda serverless functions that delivers the XMRig Monero cryptominer. The malware leverages the aws-lambda-go runtime and checks for Lambda-related environment variables to operate within Lambda instances, and it uses DNS-over-HTTPS (DoH) to hide DNS communication and evade detection; its delivery vector remains unknown.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.