Re:Detecting Monero Miners with Bpftrace
by brobinson on Tuesday February 22, 2022 @11:06PM
(#30437464)
Skimmed the article. Looks nice. Good colors and formatting throughout.
Don't delete it.
Hiding processes and tidying up the CPU time (adding it to System Idle Process on Windows, etc.) is Rootkits 101. This technique has been documented in books for 15+ years. If they don't get the info from you, they'll get it somewhere else just as easily.
Don't delete it.
Hiding processes and tidying up the CPU time (adding it to System Idle Process on Windows, etc.) is Rootkits 101. This technique has been documented in books for 15+ years. If they don't get the info from you, they'll get it somewhere else just as easily.