8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server.
"The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware code to run solely in memory and avoid disk-based detection mechanisms," Trend Micro researchers Ahmed

8220 gang actor code cryptocurrency cryptocurrency mining dll exploiting exploits fileless flaws gang injection malware memory mining oracle oracle weblogic oracle weblogic server process process injection researchers run security security flaws security researchers server shed techniques threat threat actor using weblogic