T1053.003

How Did Aqua Catch a Cryptomining Attack Hiding in Memory?

Aqua Nautilus reported detecting a multistage, fileless XMRig cryptojacking campaign targeting containerized Node.js applications built with Next.js. Aqua’s telemetry showed in-me…

Aug 4, 2026