Attackers Build “Silent” Cryptominer on Victim’s Machine and Give Themselves Away

Attackers build “silent” cryptominer on victim’s machine and give themselves away

Security researchers at Huntress have uncovered an unusual attack in which a threat actor compiled a cryptocurrency miner directly on a victim’s computer, rather than simply dropping a ready-made one, and in doing so generated so much activity that the intrusion stood out. The incident began in early September 2026 with the exploitation of CVE-2025-4632, […]

The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint

BackgroundHuntress researchers recently came across a unique incident where, after gaining initial access via exploiting a known Samsung MagicINFO vulnerability and installing a rogue AnyDesk instance on the endpoint, among other things, the threat actor aimed to deploy a cryptominer. Cryptominers in incidents aren't uncommon, but what raised our eyebrows was that the actor in this