PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

Researchers have uncovered a malware campaign named Canto Incognito targeting exposed AI and large language model infrastructure. The threat actors have compromised over 3,400 servers to deploy cryptomining payloads and expand their botnet. Administrators are advised to secure exposed AI endpoints immediately to prevent unauthorized access.