Splunk spots malware targeting Windows Server on AWS to mine Monero

RDP-enabled instances attacked, perhaps via Iran and China, then use Telegram desktop client for command and control

Data analysis firm Splunk says it's found a resurgence of the Crypto botnet - malware that attacks virtual servers running Windows Server inside Amazon Web Services....