⌁AI·CYBER·BRIEF▌

#Cryptomining

AI Threats7 min read

PoeLLM botnet mines crypto on exposed AI servers — patch LiteLLM and take Ollama off the internet

Lumen's Black Lotus Labs says a botnet active since April has hit thousands of internet-facing servers, mostly LiteLLM and Ollama, and hides its control server in a poem on GitHub.

BotnetCISA KEVLiteLLM