Menace actors are weaponizing uncovered Java Debug Wire Protocol (JDWP) interfaces to acquire code execution capabilities and deploy cryptocurrency miners on compromised hosts.
“The attacker used a modified model of XMRig with a hard-“coded configuration, permitting them to keep away from suspicious command-line arguments which might be usually flagged by defenders,” Wiz researchers Yaara Shriki and Gili
Alert: Uncovered JDWP Interfaces Result in Crypto Mining, Hpingbot Targets SSH for DDoS
