Description
XMRig is a legitimate open source cryptocurrency miner for Monero that cyberattackers frequently abuse for cryptojacking on compromised systems. Its high performance and easy configuration made it the default choice for unauthorized mining campaigns, which steal processor capacity and electricity from victims. Defenders should expect legitimate deployments in some environments, but unexpected instances usually indicate compromise through loaders, exploits, or trojanized software.
Stats
- First seen
- May 2023
- Last seen
- October 2026
Also known as
XMrigXmrig
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Coinminer.XMRig |
| ByteCode-MSIL.Trojan.Xmrig |
| ByteCode-MSIL.Trojan.XMRig |
| Gen:Variant.Application.XMRig.2 |
| Linux.Coinminer.XMRig |
| MacOS.Coinminer.XMRig |
| Script-AutoIt.Coinminer.XMRig |
| Script-BAT.Coinminer.XMRig |
| Script-JS.Coinminer.XMRig |
| Script-PowerShell.Coinminer.XMRig |
