The Hacker News

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

Canto Incognito has infected over 3,400 servers, using exposed AI and LLM infrastructure for crypto mining and botnet growth.

ClingSTUN botnet hijacks devices with years-old flaws

Security researchers have detailed a new Linux botnet that breaks into routers, cameras, video recorders and virtual private ...

PoeLLM malware infects exposed AI servers in cryptomining attacks

A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads.

Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers

Black Lotus Labs attributed the PoeLLM malware to an Italian-speaking criminal, and named the financially motivated campaign Canto Incognito because it hides the malicious commands in a poem posted to ...

ClingSTUN trasforma router e dispositivi IoT in proxy invisibili

ClingSTUN infetta router, DVR e dispositivi IoT Linux sfruttando vulnerabilità note. Usa STUN per attraversare il NAT, ...