logo

ngrok cryptojacking campaign (Campaign)

ID: 37299806-7148-5718-8886-bd39f4293698

STIX ID: report--37299806-7148-5718-8886-bd39f4293698

Feed Name: Wiz Cloud Threat Landscape

Threat Score
65/100

Date Published: 2018-09-12

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

Netlab reports on a new cryptocurrency-mining botnet that hides its C2 traffic by blending it into the ngrok tunneling service; the post details the botnet's behavior, stealthy C2 technique, and likely indicators and mitigation considerations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.