XMRig

Reported Context (1)

They transferred scripts and an SSH public key, modified system configuration, removed evidence such as command history and logs, changed macOS Packet Filter settings, and deployed XMRig 6.26.0 for cryptocurrency mining. macOS Screen Sharing Flaws Enabled Pre-Auth Root Access; CVE-2026-65400 Exploited

CVE (3)

Malware (1)

People (4)

MITRE ATT&CK (6)

Vendors (2)

Products (2)

Tools (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.