KmsdBot Cryptominer Targets the Gaming Industry

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

KmsdBot is Golang-based malware that leverages the Secure Shell (SSH) cryptographic protocol to obtain access to targeted systems to mine cryptocurrencies and carry out distributed denial-of-service (DDoS) attacks. The malware supports several architectures, including Winx86, Arm64, and mips64, x86 64.