
Cyber Attacks
PoeLLM Botnet Hides C2 in GitHub Poem, Infects 3,400 Servers
Black Lotus Labs reports a cryptomining botnet using a GitHub poem to hide command-and-control addresses, compromising over 3,400 servers.
Everything Threat Times has reported about Canto Incognito: 2 stories, newest first. Part of our AI coverage.

Black Lotus Labs reports a cryptomining botnet using a GitHub poem to hide command-and-control addresses, compromising over 3,400 servers.

A campaign dubbed Canto Incognito uses PoeLLM malware to hijack exposed AI infrastructure, turning servers into scanners and crypto miners.