- Category
- Tracked, unattributed · A vendor’s working cluster, not yet attributed.
- Origin
- Unknown
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0824 · larva-26009
What it is
Larva-26009 targets MS-SQL servers and has been observed installing the XMRig CoinMiner.
Tools
The tools and malware families the sources tie to it.
- Miner-C
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de