VERY IMPORTANT

A new investigation has discovered a malicious shell script used in a recent cryptojacking campaign, which appears to be targeting East Asian Cloud Service Providers (CSPs). In this campaign, threat actors also look for TeamTNT executables to remove them. According to the article authors, this suggests that threat actors may found traces of TeamTNT activity during their campaign.