Hacker organization Librarian Ghouls illegally mining using industrial control equipment.
Gate News bot message, cybersecurity company Kaspersky reported a mining attack incident targeting Russian industrial equipment. The hacker organization Librarian Ghouls (also known as Rare Werewolf) has been launching phishing email attacks against Russian industrial enterprises and engineering schools since December 2024, affecting Belarus and Kazakhstan as well. The attackers infiltrated hundreds of devices through disguised official documents.
The organization remotely disabled the security systems of the target devices between 1 AM and 5 AM, utilizing the devices' RAM, CPU, and GPU to conduct cryptocurrency Mining. According to a Kaspersky investigation, the organization used legitimate third-party software instead of homemade malware to carry out the attack, displaying characteristics of hacker activism. Source: Cointelegraph.