---
id: 7041
title: "CPU_HU: Fileless cryptominer targeting exposed PostgreSQL with over 1.5K victims"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/postgresql-cryptomining"
published_at: "2025-03-31T15:13:26Z"
tags: ["cloud-security", "postgresql", "database-security", "threat-research", "cryptomining", "fileless-malware"]
phying_url: "https://phying.com/item/7041"
lang: en
---

# CPU_HU: Fileless cryptominer targeting exposed PostgreSQL with over 1.5K victims

## Summary

Wiz Threat Research details JINX-0126, which abuses weak PostgreSQL credentials to run fileless XMRig-C3 cryptominers while dodging hash-based detection; C3Pool data suggests over 1,500 victims.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-03-31T15:13:26Z
- **Original:** https://www.wiz.io/blog/postgresql-cryptomining
- **Phying News:** https://phying.com/item/7041