LABRAT: Stealthy Cryptojacking and Proxyjacking Campaign Targeting GitLab

Originally published by Sysdig. Written by Miguel Hernández. The Sysdig Threat Research Team (TRT) recently discovered a new, financially motivated operation, dubbed LABRAT. This operation set itself apart from others due to the attacker’s emphasis on stealth and defense evasion in their attacks. It is common to see attackers utilize scripts as their malware because they are simpler to create. However, this attacker chose to use undetected compiled binaries, written in Go and .NET, which allo...

attacker attackers attacks campaign cryptojacking defense evasion gitlab proxyjacking research scripts stealth sysdig targeting team threat threat research written