Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse
A new Linux cryptojacking campaign, codenamed RedisRaider, targets publicly accessible Redis servers. The malware uses legitimate Redis configuration commands to execute malicious cron jobs, dropping a Go-based payload that unleashes an XMRig miner on compromised systems. The campaign also incorporates subtle anti-forensics measures to minimize detection.