Hackers Hide XMRig Miner in Windows Registry, PNG and WAV Files to Evade Detection

Hackers are using a layered Windows malware chain to run an XMRig cryptocurrency miner while keeping its key parts out of sight. The operation hides code in the Windows Registry, a PNG image, and files that appear to be ordinary WAV audio, making routine checks less useful. The attack begins with a PowerShell script that retrieves an encoded next... Weiterlesen