logo

I know what you mined last summer: summarizing Summer '23 cryptomining activity

ID: 5ef4268c-65b8-5fce-b9d6-8bccdc94e25a

STIX ID: report--5ef4268c-65b8-5fce-b9d6-8bccdc94e25a

Feed Name: Wiz Blog

Threat Score
65/100

Date Published: 2023-09-06

Date Updated: 2026-05-01

...
...

Wiz Research analyzed seven cryptomining incidents targeting cloud workloads in summer 2023, showing attackers gained access primarily via misconfigured open Jupyter Notebooks and unpatched Apache Solr, deployed miners such as XMRig, CCminer and XMR-Stak-RX, and abused admin tools (tmate, PRoot, ngrok, udocker) and file-hosting services; the report includes detailed attack flows, IoCs (hashes, IPs, wallets, pools), and recommendations for detection and risk management.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.