Malware4 min read
ComfyUI Servers Hijacked for Monero Mining and Proxy Botnet
Over 1,000 exposed ComfyUI instances targeted by cryptomining campaign. Attackers exploit custom nodes for RCE, deploy XMRig and Hysteria V2 botnet with persistence.
James RiveraApr 8, 2026