Cryptomining Campaign Returns Coal and Not Diamond
Summary: Cisco Talos recorded increased activity from the Lemon Duck cryptocurrency-mining botnet, which uses several methods to monetize compromised systems in less intrusive ways than ransomware. The same source notes a recent surge in cryptodrainer phishing attacks targeting cryptocurrency holders to trick them into divulging credentials.
What you should know: Lemon Duck shows that adversaries can monetize access quietly through cryptomining, without the headline-generating disruption of ransomware, so an intrusion that never triggers a ransom demand may still be running on your network.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026