A threat actor been spotted on a number of honeypots looking to download and execute malicious cryptomining malware.

The Rakhni Trojan is now giving bad actors the ability to infect victims either with a ransomware cryptor or a miner.

Cryptominer WinstarNssmMiner is an aggressive malware strain that has launched 500,000 attacks in the past three days earning criminals $28,000.

The malware targets Windows servers with a cornucopia of well-known exploits, all within a single executable — including the EternalBlue NSA hacking tool.

A malware family called Rarog is becoming an appealing and affordable entry point for hackers to run cryptocurrency mining campaigns, researchers say.