kthreaddk malware on Centos 7.9

A search online indicates this is a crypto mining malware that's been there since 2020. Probably related to 'threaddk'.

I encountered it on my digitalocean VM running Centos 7.9. I had set up the VM to test out some legacy app.

Most sources link this malware to postgre but in my case I don't even have postgresql installed, let alone running.

I suspect the vulnerability that was exploited was the old version of Java that I am using - JDK …

app case centos centos 7 crypto crypto mining digitalocean don legacy link malware mining running search test