VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_99a195ea89001c923b5a6f38ecf8fd56

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

Published Oct 7, 2026

Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large language model (LLM) infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet.

The financially motivated campaign, dubbed Canto Incognito, has been found to install cryptocurrency miners, including

Affected AI Products

large language model llm
Get the weekly digest. Every Monday: top AI security stories of the week. Free.