HOMETHREATSXMRIG
APT / THREAT GROUP

XMRIG

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: elf.xmrig

Threat Analysis

XMRIG is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning XMRIG

Wormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb
The Hacker News· Feb 23, 2026
Multiple Threat Actors Exploit React2Shell (CVE-2025-55182)
Mandiant Blog· Dec 12, 2025

External References

→https://www.aquasec.com/blog/container-security-tnt-container-attack/
→https://www.aquasec.com/blog/pg_mem-a-malware-hidden-in-the-postgres-processes/

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

elf.xmrigXMRIG

External Intelligence

Malpedia: elf.xmrig

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search XMRIG