Description
Panchan is a botnet that targets Linux servers, compromising them through SSH credentials and enlisting them into a peer to peer network for cryptocurrency mining and further attacks. Its lightweight design and focus on misconfigured or weakly protected servers let it spread quietly through cloud and on-premises infrastructure. Detections under this name indicate compromised credentials and unauthorized mining, which degrade performance and signal broader access problems.
Stats
- First seen
- October 2022
- Last seen
- September 2026
Alert name variants
| Alert Name |
|---|
| Linux.Coinminer.Panchan |
| Win32.Coinminer.Panchan |