Wednesday, October 14, 2026

16 Person Hacker Group Arrested for Mining Cryptocurrency at Internet Cafes

Police arrested 16 person hacker group for illegally mining cryptocurrency at Internet cafes. The hacker group compromised thousands of system in more than 30 cities across the country and earned more than 5 million yuan worth ($800,000).

How Attackers Installed Crypto Miners

The hacker group conducted a well-planned operation to deploy the Cryptocurrency miners in computers at Internet Cafes.

Liu Hua is the administrator of the criminal gang designed the mining procedures, Zhou Mou and Xiong Mou work in Internet Cafes and they promoted the mining programs. An unnamed computer service company used their privileges on access to computers to deploy the miners.

Liu an Internet cafe owner first spotted the abnormal resource usage and the same situation experienced by other Internet cafes in the city and they reported to Ruian police.

https://twitter.com/ummjackson/status/1008569453586604037

Ruian police detected the hidden mining program that runs automatically on all the computers and mines Siacoin “After an investigation, the computer maintenance of all affected Internet cafes are invariably undertaken by a computer maintenance company. The person in charge of the company, Ruan Zou, who is 35 years old was arrested.” reports hangzhou.

Still, the investigation is in progress, now the malware spread across more than 30 cities in China and more than 100 computer maintenance firms in the country being allegedly involved.

Cryptomining attacks are increasing rapidly, attackers use to compromise servers, personal computers, Chrome extensions and web portals to mine cryptocurrencies such as Monero.

The Internet oldest hacker group Rex Mundi who was active from 2012 was taken down in joint operation supported by the Europol and the Joint Cybercrime Action Taskforce (J-CAT).

Also Read

Ex-CIA Employee Charged for Leaking Powerful CIA Hacking Tools to WikiLeaks

Largest Dark Web Marketplace Black Hand Shut Down By Authorities

New Android RAT Spotted in Wild Abusing Telegram Protocol for Command and Control

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Google Pays $250,000 for AI-Assisted Chrome Exploit Enabling Windows Code Execution

Google has awarded XBOW $250,000 for creating an AI-assisted...

Hackers Use Compromised Credentials to Infiltrate European Bank Through VPN

Hackers used compromised credentials to infiltrate a European bank...

Windows Server Zero-Day Flaw Lets Attackers Crash Servers With a Single Malicious Packet

Corelight researchers have disclosed a Windows Server vulnerability that...

Google Chrome Update Fixes 37 Security Vulnerabilities, Including 7 Critical Flaws

Google has released Chrome 155 for Windows, macOS, and...

Fake WatchGuard VPN Site Steals Credentials Then Delivers Legitimate Signed Installer

A WatchGuard VPN impersonation attack that steals connection credentials...

Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

Ivanti released security updates for Ivanti Connect Secure (ICS)...

Related Articles

Recent News