procq XMRig Monero miner outbound connection to mining pool ports

Ibrahim Saud@tektrix

•updated Jun 24, 2026•1•0•3

Detects the 'procq' process establishing network connections to common Monero (XMR) mining pool ports. This behavior is indicative of a cryptominer deployment, specifically associated with the Langflow cryptominer campaign related to CVE-2026-33017.