Migo cryptominer targeting Redis (Campaign)
ID: b021c983-be71-5ec0-88d6-74d51dd3a3ca
STIX ID: report--b021c983-be71-5ec0-88d6-74d51dd3a3ca
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2024-02-20
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
Migo is a cryptomining campaign observed abusing misconfigured Redis servers on Linux: the attackers disable Redis configuration options to weaken security, deploy an obfuscated UPX-packed ELF binary that fetches and configures XMRig to mine cryptocurrency, and adjust system parameters to optimize mining while performing benign-seeming actions likely intended to evade detection.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.