Threat Actor
X3D MINER
- First Reported
- Jul 8, 2026
- Latest Reported
- Jul 8, 2026
Reported Context (1)
- The article identifies X3D MINER as the moniker appearing in Telegram infection notifications and associates the group with XMRig. Unit 42 assesses the campaign operator to be a Vidar MaaS affiliate deploying the X3D MINER XMRig package. Factory-v3 Loaders Deliver Vidar and XMRig Through Malvertising
Malware (3)
MITRE ATT&CK (14)
Products (2)
Tools (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.