| SYMBOL | COMMON_NAME | aka. SYNONYMS |
Larva-26009 targets MS-SQL servers and has been observed installing the XMRig CoinMiner.
There are currently no families associated with this actor.
| 2026-07-24
⋅
AhnLab
⋅
Case Study: Targeted Attack Case on an MS-SQL Server Involving the Installation of GotoHTTP and SoftEther VPN XMRIG Coinminer GoToHTTP HackBrowserData MimiKatz Monero Miner VShell xmrig Larva-26009 |