Over 4,000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers
A widespread exploitation effort has targeted Internet service providers (ISPs) in China and the US West Coast, using compromised hosts to install cryptocurrency miners and information thieves.
According to the Splunk Threat Research Team, the action also resulted in the delivery of a number of binaries that provide methods for establishing persistence on the systems and assist data exfiltration.
In a technical study released last week, the Cisco-owned company claimed that the anonymous threat actors carried out minimal intrusive operations to avoid detection, with the exception of artifacts created by accounts already compromised read more about Over 4000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers.
Get up to date on the latest cybersecurity ...