Cron persistence file written by redis-server process

Ibrahim Saud@tektrix

•updated 23 days ago•0•0•2

Detects unauthorized modification of system cron files by the redis-server process, indicative of rogue redis replication exploitation, followed by the execution of a cron job associated with the XMRig cryptocurrency miner.