LOWVulnerability
Global

Cryptominer Abuses Linux PAM to Hide From SOC Analysts

·Source: Infosecurity Magazine

Updated:

Executive Summary

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts

Analysis

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts
Source Attribution

Originally published by Infosecurity Magazine on Jul 30, 2026.

Related Threats