The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint

Huntress Version 1 original current

Imported from official source

Threat actors exploited Samsung MagicINFO to install AnyDesk, disable Defender, and compile a Monero miner directly on a victim endpoint. Learn the detection signals.

This version

Version
1 of 1
Recorded
September 24, 2026 16:00
Change
Initial
Content hash
9b0302003c75f1f2fe40407f97308be0
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.