Mimo cryptomining campaign (Campaign)
ID: 8b20a974-4249-5976-ac39-c3f2612ac991
STIX ID: report--8b20a974-4249-5976-ac39-c3f2612ac991
Feed Name: Wiz Cloud Threat Landscape
Date Published: 2024-01-18
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
Collection of links and brief notes pointing to active exploitation of critical vulnerabilities (Log4j, WSO2, PaperCut, CVE-2022-26134 and others) used to deploy cryptocurrency miners, Kinsing/Dark IoT botnet activity, backdoors and Cobalt Strike beacons; highlights resource-hijacking campaigns and references 'RansomOp'. The referenced reports cover attacks against VMware Horizon, education-sector PaperCut servers and other targets, indicating widespread commodity malware and post-exploitation tooling being used in the wild.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.