National Cyber Warfare Foundation (NCWF)

Cryptominer Abuses Linux PAM to Hide From SOC Analysts

0 user ratings

2026-08-10 10:19:16
milo
Blue Team (CND) , Red Team (CNA)

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts

Cryptominer Abuses Linux PAM to Hide From SOC Analysts
https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/
Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts
Thu, 30 Jul 2026 14:30:00 GMT
https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/

Source: InfosecMagazine
Source Link: https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/

Comments	new comment
Nobody has commented yet. Will you be the first?

Forum

Blue Team (CND)

Red Team (CNA)

Cryptominer Abuses Linux PAM to Hide From SOC Analysts

Comments