Threat actors behind the RapperBot botnet have updated the malware to include the XMRig Monero miner in an effort to exfiltrate cryptocurrency from IoT devices running on Intel x64 architectures as part of a campaign that began in January, BleepingComputer reports. FortiGuard Labs researchers discovered that the updated RapperBot botnet has employed various means to evade detection, including the integration and obfuscation of miner code with double-layer XOR encoding, command-and-control server-based mining configuration receipt, and randomized request sizes and intervals.

Read full article on SC Magazine