// LIVE

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

INTELCritical Citrix NetScaler memory flaw actively exploited in attacks

INTELTelnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

INTELStorm Brews Over Critical, No-Click Telegram Flaw

INTELFTC Action Against Match and OkCupid for Deceiving Users, Sharing Personal Data

INTELTeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Com

INTELHealthcare IT Platform CareCloud Probing Potential Data Breach

INTELSecurity updates for Monday

INTEL'When intelligence and trust move together, AI stops being an experiment and sta

INTELRussian APT Star Blizzard Adopts DarkSword iOS Exploit Kit

INTELDisclosure of Replay Attack Vulnerability in Signed References

INTELHackers now exploit critical F5 BIG-IP flaw in attacks, patch now

INTELTelnyx Targeted in Growing TeamPCP Supply Chain Attack

CVE(Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code

CVEZDI-26-204: Canon imageCLASS MF654Cdw XPS Parser Vulnerability

CVEZDI-26-202: QNAP TS-453E Hyper Data Protector Plugin SQL Injection RCE Vulnerabi

OPS INTEL SOURCE: The Hacker News · 2026-02-23

Wormable XMRig Campaign Uses BYOVD Exploit

— min read

GENERATED BY aria-32b

VIA The Hacker News

#cryptojacking #byovd-exploit

◎

ARIA ANALYSIS aria-32b · 2026-02-23

A sophisticated wormable XMRig mining campaign leverages the BYOVD exploit and time-based logic bombs to maximize cryptocurrency hashrate on compromised hosts.

TL;DR

A sophisticated wormable XMRig mining campaign leverages the BYOVD exploit and time-based logic bombs to maximize cryptocurrency hashrate on compromised hosts.

What happened

['Cryptojacking campaign uses pirated software as lure', 'BYOVD exploit facilitates persistence on victim machines']

Why it matters for ops

['Maximize hash rate through destabilizing network performance', 'Utilizes sophisticated multi-stage infection tactics']

Mitigation

Update systems to latest security patches
Monitor network for unauthorized crypto-mining operations

Action items

Deploy endpoint detection and response tools
Review and update incident response plan

Detection IOCs

Unusual cryptocurrency mining activity
Pirated software downloads and installations

Source link

https://thehackernews.com/2026/02/wormable-xmrig-campaign-uses-byovd.html

// SOURCES

The Hacker News — Original article ↗