Description
Wonode is a loader associated with the 8220 Gang, a criminal group known for cryptocurrency mining campaigns against cloud and container infrastructure. It deploys XMRig miners and maintains access to compromised Linux and Windows systems, and researchers have tracked the gang exploiting cloud service vulnerabilities to deliver it.
Stats
- First seen
- March 2024
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Script-JS.Trojan.Wonode |