Cryptominer Abuses Linux PAM to Hide From SOC Analysts

Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts