Hegwin.Me

The bitterest tears shed over graves are for words left unsaid and deeds left undone.

My Server Got Hijacked to Mine Crypto (and Attack Others)

我的服务器被挖矿程序攻击了(顺便攻击了别人)

Recently, one of my servers was infected by the XMRig cryptocurrency mining malware. This post documents the entire journey of how I discovered it, analyzed the cause, removed the malicious processes, and hardened the server afterward — all with a lot of help from AI tools like ChatGPT.