Muhstik campaign

Researchers uncovered a new campaign using Muhstik malware to target Apache RocketMQ, a distributed messaging platform, exploiting a remote code execution vulnerability (CVE-2023-33246). Attackers use this vulnerability to download and execute Muhstik malware on compromised instances, leading to activities such as cryptocurrency mining and Distributed Denial of Service (DDoS) attacks.