Question 1

What is LARVA-26009 — Larva-26009?

Accepted Answer

Larva-26009 targets MS-SQL servers and has been observed installing the XMRig CoinMiner.

Question 2

What is the authoritative source for LARVA-26009?

Accepted Answer

Larva-26009 (LARVA-26009) is catalogued in MISP-Galaxy Threat Actor cluster and curated for EU compliance use cases by SQUR.

Larva-26009Larva-26009

Profile