Malware

XMRig

First seen: 2017-05 • Status: active

Currently Active Threat

XMRig is a cryptocurrency miner. While it is legitimate software, criminals use it to mine crypto on your computer without permission.

Overview

XMRig is a legitimate open-source Monero miner frequently abused by attackers for cryptojacking.

How It Spreads

  • Dropped by other malware
  • Cryptojacking scripts
  • Compromised servers

What It Does

  • Monero mining
  • Resource consumption
  • Electricity theft

Is your business exposed?

Target Platforms

Windows, Linux, macOS

Detection Tips

  • Monitor CPU usage
  • Watch for mining pool connections

MITRE ATT&CK Techniques

T1496

If You're Infected

  1. 1.

    Kill mining processes

  2. 2.

    Identify and patch initial access vector

Related Malware

Kinsing

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required