Netskope Threat Labs

DisguisedXMRigMiner

ATP Sandbox Adv. Heuristics

This generic detection identifies cryptocurrency miners based on the XMRig software that disguise themselves as legitimate files or processes to avoid detection.

First seen
May 2022
Last seen
October 2026
Alert Name
ByteCode-MSIL.Trojan.DisguisedXMRigMiner
Win32.Trojan.DisguisedXMRigMiner
Win64.Trojan.DisguisedXMRigMiner