Cryptominer Abuses Linux PAM to Hide From SOC Analysts

InfoSecurity Magazine · 4 days ago General

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts