RandomX is Monero’s proof-of-work mining algorithm, designed to make general-purpose CPUs efficient at mining while reducing the advantage of specialized ASIC hardware. It does this by using CPU-friendly workloads, including memory-heavy and randomized execution patterns, so ordinary servers can compete reasonably well in block generation.
In cyber security, RandomX matters because it makes stolen cloud or on-premises CPUs economically useful to attackers. If a server is compromised, running a Monero miner can quietly convert spare compute into revenue without needing expensive hardware. Defenders often spot this abuse through sustained high CPU usage, unusual process trees, or outbound connections to mining pools. Because RandomX favors standard processors, even ordinary application servers, including exposed AI platforms, can become attractive mining targets after an intrusion.