Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files

Reported 08 Sep 2026 by otx · Severity: medium

An exposed directory at 188.245.99.156 revealed a comprehensive cryptomining toolkit containing 147 files including Python exploit source code, campaign logs, and Windows registry hives. Analysis confirms 3,562 Redis servers were compromised across two campaign runs targeting 12,