✉news TechnologySoftware first seen 5 h ago, last 1 h ago, peak #15
Cryptomining botnet hid command addresses in GitHub poem, hit 3,400 servers
Original: Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
Security researchers have uncovered a cryptomining botnet that infected more than 3,400 servers while concealing its command-and-control addresses inside a poem posted on GitHub. The trick made the malware's infrastructure harder to detect and take down, as defenders must report or remove the poem to disrupt the botnet. The campaign highlights how attackers increasingly abuse legitimate platforms as resilient backup channels for malware operations.
Why now: The novel use of a GitHub poem to hide botnet infrastructure is an unusual evasion technique drawing security community attention.
Rank over time, top of the chart is #1. 4 snapshots from 5 h ago to 1 h ago.
Evidence
- Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers · Help Net Security
API: https://socialmediatrends-api.osmike.com/v1/trends/1478711