Hacker organization Librarian Ghouls illegally mining using industrial control equipment.
Gate News bot reports that the cybersecurity company Kaspersky has reported a mining attack targeting industrial equipment in Russia. The hacker group Librarian Ghouls (also known as Rare Werewolf) has initiated phishing email attacks against Russian industrial enterprises and engineering schools since December 2024, affecting Belarus and Kazakhstan as well. The attackers infiltrated hundreds of devices using disguised official documents.
The organization remotely disables the security systems of target devices between 1 AM and 5 AM, using the devices’ RAM, CPU, and GPU to conduct cryptocurrency Mining. According to a Kaspersky investigation, the organization employs legitimate third-party software instead of custom-made malware to carry out the attacks, demonstrating characteristics of hacker activism. Source: Cointelegraph.