'P2PInfect' Worm Grows Teeth With Miner, Ransomware & Rootkit

P2PInfect is a Linux worm that leverages misconfigured Redis replication to propagate and form a P2P botnet; recent updates added a usermode rootkit, an active Monero miner (approximately 71 XMR mined), and a rudimentary ransomware module. While the ransomware appears poorly targeted for typical Redis deployments, the rootkit and cryptomining increase persistence and detection risk; infections are concentrated in East Asia and organizations should secure exposed Redis instances, restrict access, and monitor for CPU/disk spikes.