According to a recent report, hackers are exploiting a security flaw in XWiki, a web-based platform for content creation, to run programs on computers they don’t own.
The bug in XWiki’s template system has made it possible for bad actors to mine the Monero (XMR) cryptocurrency without permission.
Hackers send a request that downloads a small program (x640) onto the computer of an unfortunate victim. Later, another request runs this program, and the program in question downloads two more scripts (x521 and x522 install a Monero miner (tcrond) and make it run and stop any other mines on the infected machine.
HOT Stories Morning Crypto Report: XRP to $4.20 Not a Dream, New Ethereum Hard Fork Game-Changer, Bitcoin Faces Worrying $111 Million SaleSolana Shades XRP: 'There Is No Bridge Currency'This Bitcoin (BTC) Fakeout Can Destroy $100,000, Will Dogecoin (DOGE) Add Zero? XRP Getting SqueezedXRP vs Bitcoin: Fight or Flight, Dogecoin Volume Jumps 62% as DOGE Price Eyes Rally, Shiba Inu to Add Zero If History Repeats — Crypto News Digest
You Might Also Like
Sun, 10/19/2025 - 08:50 North Korean Malware Hits Ethereum and BSC Wallets: DetailsByAlex Dovbnya
The Monero tokens mined with the hacked computer are then sent via c3pool.org.
The Hacker News report, which cites data from the CISA, has also mentioned security flaws in DELMIA Apriso that allowed hackers to run code remotely in a similar fashion.
How to protect your computer?
Those who have potentially fallen victim to cryptojacking, the practice of illegally mining crypto with the help of someone else's machine, should block the IPs and monitor the network for connections to c3pool.org.
Of course, one should also remove the files associated with the miner if they are found on the existing computer.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
