T1496

Resource Hijacking

discovered 2026-06-11

Secondary payload assessed as a cryptominer; detection hint is unexpected modification of /usr/bin/monero-wallet-gui.

View on MITRE ATT&CK

Seen in packages

Campaigns