Skip to content
MalwareWiki

Malware

Lemon Duck

Lemon Duck is a monerocrypto-mining malware with capabilitiy to spread rapidly across the entire network.

Lemon Duck is a Windows malware family.

Background

Lemon Duck is Monero-mining malware able to propagate quickly throughout an entire network. It executes its payload largely in memory, and moves laterally inside a network either by abusing the SMB RCE flaw (CVE-2017-0144) or through brute-force attacks.

Source: Malpedia (Fraunhofer FKIE).