PacketCrypt Classic Cryptocurrency Miner on PHP Servers, (Tue, Jan 7th)

The SANS DShield project receives a wide variety of logs submitted by participants of the DShield project. Looking at the “” URLs page, I observed an interesting URL and dived deeper to investigate. The URL recorded is as follows:
http://news.poseidon-us.com/THCWZ6