---
id: 7541
title: "Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files"
source_domain: hunt.io
source_url: "https://hunt.io/blog/redis-cryptomining-botnet-3562-servers"
published_at: "2026-09-08T00:00:00Z"
tags: ["threat-intelligence", "malware", "botnet", "redis", "unauthenticated", "cryptomining"]
phying_url: "https://phying.com/item/7541"
lang: en
---

# Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files

## Summary

Hunt.io parsed a Redis cryptomining botnet's own exposed logs: 3,562 servers compromised, rogue replication as the only technique that scaled, and 72.6% success against a no-auth target list.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2026-09-08T00:00:00Z
- **Original:** https://hunt.io/blog/redis-cryptomining-botnet-3562-servers
- **Phying News:** https://phying.com/item/7541