Crypto Miner - GoKawiil

Anthropic's Claude Code spots hidden xmrig crypto miner on developer's Mac

A Reddit user building a Mac temperature-monitoring app with Claude Code was alerted by the AI agent that xmrig, a crypto-mining program, was running unauthorized on their machine using roughly 1175% CPU across about 12 cores. Claude identified the malware had been added to startup around August 29 and offered to quarantine the files rather than deleting them outright.

tomshardware.com · 2026-10-19

macOS screen-sharing flaw CVE-2026-65400 exploited to plant crypto miners, Apple patches it

Dutch cybersecurity officials warned that attackers are actively exploiting a high-severity macOS vulnerability in the screen sharing feature, gaining root access on exposed systems and installing Monero crypto miners. Apple issued a patch last week for Tahoe, Sequoia, and Sonoma after the flaw, rated 7.1 of 10, was disclosed at the Black Hat security conference; the company credited security firm Bynario with the finding.

stratechery.com · 2026-10-05