ActiveMQ CVE-2023-46604 exploited by Kinsing intrusion set

**Executive summary:** Sekoia TDR observed Kinsing rapidly exploiting ActiveMQ CVE-2023-46604 in the wild to deliver a Go-based Kinsing payload that installs a rootkit, removes competitors, establishes persistence, spreads via SSH, and deploys an XMRig cryptominer; the report includes malware technical details (hash, compilation, C2/decryption methods), infrastructure and IPs, Monero wallet tracking and earnings, IoCs, and mitigation advice to patch ActiveMQ or restrict OpenWire exposure.