8220 Gangs Recent use of Custom PwnRig Crypto Miner and Botnet
released on 2021-05-21 @ 08:30:46 PM
Lacework Labs has recently encountered a cluster of malicious activity based around loader scripts, and delivery of a custom cryptocurrency miner and an IRC bot. Specifically, Lacework Labs identified a new loader script, a custom "PwnRig" miner, and unique Tsunami IRC botnet variants. Additionally, this blog shares insight into noteworthy infrastructure and attribution findings.