Topic
#XMRig
2 articles
Some fun with a miner
A malware that deploys an XMRig miner and hides it behind legitimate Windows processes such as the Visual Basic compiler.
Read teardown
Inside one xmrig botnet miner
How a Linux xmrig cryptominer botnet spread from a compromised PHP site: the panel, the deployment scripts and the Monero wallets behind it.
Read teardown
No articles match that filter.
More from the research archive
Hack Yourself: Reversing the Program That Came Without a Manual
An interactive essay on reading the world, and myself, the way I read a malware sample: a program with no manual, a malware report on that program with six findings (Fun included), a triage window, a trace log, a breakpoint and a git history. The skills I thought were obsolete still transfer, once I learn to export them.
Read essay
You're Not the Worst One Here
A personal essay on keeping up with AI: the daily flood of new models and confident takes, and the feeling of being left behind.
Read essay
Lu0bot - An unknown NodeJS malware using UDP
An analysis of Lu0bot, a lightweight and previously unknown Node.js malware seen in early 2021 that talks to its server over UDP.
Read teardown
Anatomy of a simple and popular packer
A walkthrough of a simple, widely used packer: its architecture, the PE stub and the shellcode stages that unpack the final payload.
Read teardown