⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Malware

Lambsys: Custom Monero Miner Malware

June 30, 2026

Lambsys is a Go-based ELF executable used in cryptojacking campaigns targeting Langflow vulnerabilities. It terminates rival miners, disables security controls, establishes persistence, and deploys a custom XMRig miner. It propagates via SSH and has been iterated on for over two years.