The surge of cryptojacking campaigns

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

Recent cryptojacking campaigns disclosed that intruders exploited DLL Side-Loading issues in Microsoft OneDrive by writing a fake secur32.dll file to establish persistence and operate undetected on compromised systems.