Andrey Shalnev
Security Researcher
Andrey Shalnev is a security researcher for F5. Previously, he worked as a penetration tester at Citadel Consulting.
Research by Andrey Shalnev (9)
Article | Oct 1, 2019
Attackers Use New, Sophisticated Ways to Install Cryptominers
How a Jenkins dynamic routing vulnerability becomes an attacker’s infection vector for installing and executing a cryptominer.
14 min read
Article | Jul 31, 2019
Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in June 2019
Similar to April and May, threat actors in June continued targeting the deserialization vulnerabilities found in Oracle WebLogic to mine cryptocurrency.
7 min read
Article | Jul 2, 2019
New Golang Malware is Spreading via Multiple Exploits to Mine Monero
A newcomer to the malware scene, Golang-based malware has been seen installing cryptominers specifically targeting Moreno cryptocurrency.
11 min read
Article | Mar 13, 2019
“CryptoSink” Campaign Deploys a New Miner Malware
Attackers continue to exploit old vulnerabilities, use new methods to kill competing crypto-miners, and survive removal by administrators.
8 min read
Article | Apr 12, 2018
Windows IIS 6.0 CVE-2017-7269 is Targeted Again to Mine Electroneum
Attacks are back to targeting a Windows IIS vulnerability first disclosed a year ago to mine Electroneum.
8 min read
Article | Mar 28, 2018
Old Dog, New Targets: Switching to Windows to Mine Electroneum
Apache Struts 2 Jakarta Multipart Parser RCE crypto-mining campaign is now targeting Windows, not just Linux systems.
8 min read
Article | Mar 8, 2018
rTorrent Vulnerability Leveraged in Campaign Spoofing RIAA and NYU User-Agents?
The same rTorrent XML-RPC function configuration error that was targeted to mine Monero in February was also targeted in January in a campaign apparently spoofing user-agents for RIAA and NYU.
6 min read
Article | Feb 28, 2018
rTorrent Client Exploited In The Wild To Deploy Monero Crypto-Miner
A previously undisclosed misconfiguration vulnerability in the rTorrent client is being exploited in the wild to mine Monero.
8 min read
Blog | Feb 21, 2018
XMRig Miner Now Targeting Oracle WebLogic and Jenkins Servers to Mine Monero
The same drop zone server used last week to mine Monero on compromised Jenkins automation servers is now being used in a new Monero mining campaign targeting Oracle Web Logic servers.
3 min read
Results 1-9 of 9
Stay up to date with F5 Labs
Get the latest threat intelligence and research delivered to your inbox.