In an ongoing effort, a cloud threat actor organisation known as 8220 has modified its malware toolkit to break into Linux systems and install cryptocurrency miners.
Microsoft Security Intelligence explained in a series of tweets on Thursday that the changes “include the deployment of fresh versions of a crypto miner and an IRC bot.” Over the past year, the group has actively upgraded their payloads and tactics. Read More…