The PoeLLM malware has infected over 3,400 servers to expand a crypto-mining botnet.

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html

PoeLLM Malware Expands Cryptojacking Footprint PoeLLM has reportedly infected more than 3,400 servers to grow a crypto-mining botnet, with compromised infrastructure repurposed for sustained illicit mining activity. The campaign, outlined in PoeLLM malware coverage, centers on server-side compromise at scale rather than endpoint delivery. https://thehackernews.com/2026/10/poellm-malware-infects-3400-servers-to.html