Cryptojacking campaign uses AI chatbots and ScreenConnect to target high-end GPUs (opens in new tab)

Covers From poisoned search results to GPU mining: A cryptojacking campaign abusing ScreenConnect and Microsoft .NET utilities

A sophisticated cryptojacking campaign is targeting users with high-performance GPUs by poisoning search results and AI chatbot recommendations. Attackers impersonate popular system utilities like CrystalDiskInfo and FurMark to deliver malicious ZIP archives to unsuspecting users. These downloads initiate a multi-stage infection chain that utilizes DLL sideloading to silently install ScreenConnect for persistent remote access. <a href="

Read the original article