CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits

We uncovered the active exploitation of the Apache ActiveMQ vulnerability CVE-2023-46604 to download and infect Linux systems with the Kinsing malware (also known as h2miner) and cryptocurrency miner.

activemq apache apache activemq apache activemq vulnerability cryptocurrency cryptocurrency miner cryptominers cve cve-2023-46604 download exploitation exploited infect kinsing kinsing malware linux linux systems malware miner reports rootkits systems trend micro research : articles trend micro research : network trend micro research : research uncovered vulnerability