• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    PoeLLM cryptominer DNS lookup for Kryptex pool (xmr-ru.kryptex.network / kryptex.ru nodes)

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Arnold Chan@slaz
    •updated 14 days ago•0•0•4

    Detects DNS lookups, TLS connections, and network traffic associated with the PoeLLM cryptominer communicating with Kryptex mining pools, as well as Stratum mining protocol login attempts.

    Suricata

    Tags

    T1496 - Resource HijackingT1071.001 - Web ProtocolsTA0040 - ImpactNetwork Connection OutboundDNS QueryIDS IPS AlertMalware DetectedNetwork GenericWindowsLinuxSuricata IDSSnort IDSDNSTrojan Activitysuricata

    Found in

    • PoeLLM Malware Targets Exposed AI InfrastructureLast updated 14 days ago
    • PoeLLM Malware Targets Exposed AI InfrastructureLast updated 14 days ago
    • PoeLLM Malware Targets Exposed AI InfrastructureLast updated 14 days ago
    • PoeLLM Malware Targets Exposed AI InfrastructureLast updated 14 days ago
    • PoeLLM Malware Targets Exposed AI InfrastructureLast updated 14 days ago

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?