Security researchers from F5 Networks identified the malware campaign Zealot targeting internal networks. Leveraging NSA Exploit EternalBlue and EternalSynergy, Zealot is highly obfuscated and can deliver multistaged attacks. It exploits unpatched Apache Struts Vulnerability(CVE-2017-5638) and DotNetNuke (CVE-17-9822) Researchers believe the attack was developed and is being run by threat actors several levels above ordinary bot herders. Mule malware mines the most Anonymous cryptocurrency Monero and the specific miner address paid approximately USD 8,500.”]
Source: https://gbhackers.com/new-sophisticated-malware-zealot/