TLDR InfoSec · MISCELLANEOUS
8220 MINING GANG'S NEW TOOL: K4SPREADER
Summary from the TLDR InfoSec newsletter
A new tool called "k4spreader" is being used by the "8220" mining gang to install malware like the Tsunami DDoS botnet and PwnRig mining program. The tool is still in development with three observed variants. It is designed to download and execute malicious files, primarily Tsunami and PwnRig.