test_1 VS randomx-sniffer

Another comment from ahiknsr points out one repo affected:

https://github.com/Bhargav1912/test_1/pull/2/files

Following the files used reveals the pool and wallet used. The pool lets you look up the stats for this wallet. For this wallet, it says:

> Total Paid: 163000 TRTL - 42.16$

But I guess the culprit is rotating wallets. Juding by the hash rate, the pool estimates a weekly income of 700$. It could be a multiple of this if the culprit uses multiple wallets at once.

The proof of concept exists https://github.com/tevador/randomx-sniffer

Nah, it looks like that but there's precompiled bat files available here. https://github.com/tevador/randomx-sniffer/releases

rip gamers using norton. if they want to detect miners something like randomx sniffer might be a more suitable solution

There's also a sniffer tool to detect monero mining, but I haven't looked into that and at first glance it doesn't look like it's available for Linux, but it proves the concept.

the developer of the mining algo (randomx) also put out a randomx sniffer: https://github.com/tevador/randomx-sniffer

We reached out to AV providers with https://github.com/tevador/randomx-sniffer and never received a reply.

If you have access to the instance it is running on, there are tools to automatically detect randomx monero) mining activity, for example: https://github.com/tevador/randomx-sniffer by the randomx author.

Know that Tevador, the main author of RandomX, has written a RandomX sniffer for network operators to use to detect possible botnet software. https://github.com/tevador/randomx-sniffer