‘Yet another Mirai-based botnet’ is spreading an illicit cryptominer

A clever malware operation nicknamed NoaBot is reportedly using a variant of the notorious Mirai malware to secretly run cryptocurrency mining software. Researchers at Akamai revealed that the campaign has been active for about a year, spreading via the SSH Linux protocol to install a modified version of the XMRig miner on infected devices. The operation is linked to P2PInfect, a worm first identified in mid-2023.