Romania-linked ‘Rubycarp’ hackers look for cryptomining, phishing DDoS opportunities
Rubycarp has been in operation for at least a decade, and its campaigns appear to overlap with other cybercrime groups, according to researchers at Sysdig.
Linux devices are under attack by a never-before-seen worm | Ars Technica
Based on Mirai malware, self-replicating NoaBot installs cryptomining app on infected devices.