Sunday 26 July 2026 18:34:09 GMT+02:00
Netcrook
#XMRig miner
The Ruby Package Trap That Waited Hours Before Turning Servers Into Miners
A reported RubyGems campaign used delayed execution and sandbox checks to keep trojanized libraries quiet until they could launch XMRig and start covert Monero mining.
RubyGems Became a Quiet Mining Lane, and SSH Was the Second Door
A cluster of malicious Ruby packages points to a familiar pattern in modern supply-chain abuse: trusted installs can become execution points, and trusted remote access can become a spread path.
When an AI Gateway Turns Into a Miner: The Quiet Theft of Cloud Compute
A compromised AWS-hosted AI gateway tied to Amazon Bedrock shows how generative AI middleware can become valuable enough to hijack for cryptocurrency mining.