New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

A novel cryptojacking campaign involving a Golang ELF malware named Migo is actively targeting exposed Redis servers to gain access to Linux hosts, disable security controls (including SELinux), install persistence, hide artifacts using a modified libprocesshider, and deploy XMRig miners retrieved via Transfer.sh and Pastebin; the report details novel system‑weakening techniques, persistence steps, and overlap with tactics used by known cryptojacking groups.