Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
Image: Help Net Security
ad slot · in-content video 16:9
Coverage
Coverage
- Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and open-source tools, mines cryptocurrency on them and uses them to hunt for…