RedTail
- Malware type
- cryptominer
- Family
- Malware family
- Last IoC activity
- 2026-07-22 02:43:23
- Profile updated
- 2026-07-07 14:29:13
Targeted industries: energy-and-utilities technology-and-telecommunications government-and-public-sector
Context
RedTail is a cryptomining malware, which is based on the open-source XMRIG mining software. It is being spread via known vulnerabilities such as: - CVE-2024-3400 - CVE-2023-46805 - CVE-2024-21887 - CVE-2023-1389 - CVE-2022-22954 - CVE-2018-20062
Exploited vulnerabilities
- CVE-2018-20062 (vulnerability)
- CVE-2022-22954 (vulnerability)
- CVE-2023-1389 (vulnerability)
- CVE-2023-46805 (vulnerability)
- CVE-2024-21887 (vulnerability)
- CVE-2024-3400 (vulnerability)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Redtail (report)
- securite360.net — How Long Can A Vulnerable Server Stay Clean On The Internet A Honeypot Tale (report)
- akamai.com — 2024 Redtail Cryptominer Pan Os Cve Exploit (report)