Eclypsium-Device-Threat-Intel-March-2026.pdf

Eclipsium reports new malware samples collected March 6, 2026: a multi-architecture Mirai-derived DDoS botnet variant (CondiBot/QTXBOT) targeting Linux and network devices and an SSH-scanning Go-based cryptominer ("Monaco") that brute-forces SSH to deploy XMRig miners; the report includes file hashes, C2 IPs/ports, attack chains, architectural variants, YARA detection rules, and recommendations to monitor and harden network devices.