← Back to Feed

Case Study: Distribution of a CoinMiner Targeting Linux SSH Servers via Malware Distribution via Network Transmission

July 11, 2026 · AhnLab ASEC · Severity: HIGH

AhnLab ASEC observed attacks using malware to distribute XMRig CoinMiner on poorly managed Linux servers. The malware has propagation capabilities, allowing it to spread via SSH.

Key Takeaways

  • AhnLab ASEC identified CoinMiner attacks targeting Linux SSH servers.
  • The malware uses propagation capabilities to spread via SSH.
  • It installs the XMRig CoinMiner on compromised systems.
☕ Buy a Coffee