Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

A new Mirai-based botnet named NoaBot is being used in a crypto mining campaign by threat actors, according to Akamai researchers. The botnet can spread itself through a wormable self-spreader and an SSH key backdoor. Despite similarities to previous Mirai variants, NoaBot uses unique obfuscation tactics and offers no information about the mining pool or wallet address, making the operation’s profitability assessment impossible. High concentrations of NoaBot infections have been reported in China.