Kaspersky: Hackers use legitimate third-party software to invade industrial enterprises and engineering schools, manipulating encryption Mining in the early morning.

Cybersecurity firm Kaspersky revealed that a hacker group known as Librarian Ghouls, also known as Rare Werewolf, has attacked hundreds of Russian devices since December 2024 through malicious phishing emails disguised as official documents, specifically targeting industrial enterprises and engineering schools, affecting Belarus and Kazakhstan. The organization disables the security system via a remote connection, runs cryptocurrency mining software from 1 a.m. to 5 a.m., utilizing device RAM, CPU, and GPU to optimize mining. Kaspersky speculated that it may have been a hacktivist, relying on legitimate third-party software rather than homemade malicious programs. (Cointelegraph)