Emerging Romanian Hacking Group Diicot Steals Cryptocurrency

Cado Security spotted the Romanian threat actor Diicot using Cayosin, a variant of Mirai, to launch DDoS and cryptojacking attacks in its latest campaign. The campaign is ongoing and targets OpenWrt routers.  It is claimed that the hacking group is evolving tactics to expand its attack scope.