Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Linux Cryptomining Campaign Weaponizes PAM to Hide XMRig Botnet Activity

A new Linux cryptomining campaign has surfaced using a rare trick to stay hidden inside compromised networks. Instead of behaving like typical malware, the operators turned a trusted Linux security feature into a tool for covering their tracks. This let them mine Monero cryptocurrency while dodging alerts that usually expose intruders. The attack began in […] The post Linux Cryptomining Campaign Weaponizes PAM to Hide XMRig Botnet Activity appeared first on Cyber Security News.
A new Linux cryptomining campaign has surfaced using a rare trick to stay hidden inside compromised networks. Instead of behaving like typical malware, the operators turned a trusted Linux security feature into a tool for covering their tracks. This let them mine Monero cryptocurrency while dodging alerts that usually expose intruders. The attack began in May 2026 when threat actors slipped into a target network through a trusted third party connection. Once inside, they escalated access to root, the highest level…
Excerpt shown under the publisher's RSS terms · 81 words · full text and figures are on the publisher's site
Related coverage

SSH Bot Profiles Linux CPU, GPU and RAM Before Deploying Cryptocurrency Miner
Cybersecurity News · Jul 31, 2026

Hackers Turn More Than 3,500 Redis Servers Into Cryptocurrency Miners
Cybersecurity News · Sep 9, 2026

Dysphoria Botnet Infects 200,000 IoT Devices and Hides C2 Behind Blockchain Domains
Cybersecurity News · Jul 28, 2026

Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · Aug 23, 2026