'CRYSTALRAY' ATTACKS JUMP 10X, USING ONLY OSS TO STEAL CREDENTIALS

Summary from the TLDR InfoSec newsletter

A new threat actor named "Crystalray" is using open-source software tools to scale its credential stealing and cryptomining operations. First spotted in February, Crystalray has now affected over 1,800 IP addresses globally. Its attack chain includes tools like ASN for reconnaissance, zmap for port scanning, and httpx for domain verification.