OTX Threat: Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files
AI Summary
An exposed directory at 188.245.99.156 revealed a comprehensive cryptomining toolkit containing 147 files including Python exploit source code, campaign logs, and Windows registry hives. Analysis confirms 3,562 Redis servers were compromised across two campaign runs targeting 12,966 hosts. The operation exploited unauthenticated Redis instances using rogue replication techniques to inject cron job
Discussion
Sign in to join the discussion.
Loading comments…