PowerShell Malware Abuses Registry and DNS TXT Records to Deploy XMRig Crypto Miner
Sat Sep 19 2026
Cryptocurrency
Detection & Response
Network Protocol
Malware
Windows
Threat Intel
gbhackers.com
A sophisticated cryptomining campaign is employing multiple layers of obfuscation to conceal malicious PowerShell payloads and ultimately deploy an XMRig-based cryptocurrency miner. This obfuscation includes Windows Registry entries, DNS TXT records, PNG images, and WAV audio files. The infection was detected after repeated security alerts indicated suspicious PowerShell activity. The initial execution command launched PowerShell […]
The post PowerShell Malware Abuses Registry and DNS TXT Records to Deploy XMRig Crypto Miner appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.