10:24
2026-10-08
helpnetsecurity.com
ai-safety
Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
Black Lotus Labs reported that a cryptomining botnet campaign it calls Canto Incognito, using malware dubbed PoeLLM, has infected more than 3,400 servers by breaking into exposed AI services and open-…