Blog Security Research You Had Me at Hi — Mirai-Based NoaBot Makes an Appearance Stiv Kupchik is a Security Researcher Team Lead at Akamai. His research projects revolve around OS internals, vulnerability research, and malware analysis. He has presented his research at conferences such as Black Hat, Hexacon, and 44CON. In addition to being a cybersecurity professional, Stiv also has a BSc in physics. Executive summary \r\n \r\n Akamai security researchers uncovered a new crypto mining campaign, which has been active since the start of 2023. \r\n \r\n The malware is spread over SSH protocol using a custom Mirai botnet that was modified by the threat actors. \r\n \r\n The capabilities of the new botnet, NoaBot, include a wormable self-spreader and an SSH key backdoor to download and execute additional binaries or spread itself to new victims. \r\n \r\n As part of the attack, a modified version of the XMRig miner is dropped.…