As cited
Copy frozen at (site build).
threat intel
Betting on Bots: Investigating Linux malware, crypto mining, and gambling API abuse
The REF6138 campaign combined cryptomining, distributed denial of service (DDoS) attacks, and gambling application programming interface (API) abuse for potential money laundering. Attackers leveraged evolving Linux malware and covert communication methods to maintain persistence and evade detection.
Why it matters: Linux system administrators and cloud operators need to monitor for cryptomining activity and unusual outbound connections to gambling platforms, as these campaigns target compute resources and financial infrastructure for illicit gain.
- Source published
- First seen by Cybersecurity Tracker