SecurityTom's Hardwareabout 2 hours ago
Poem-Based Malware Hits 3,400 AI Servers
3 min read
Lumen's Black Lotus Labs reports cryptomining malware named PoeLLM hit over 3,400 victim servers since April 2026. The campaign uses a poem on GitHub to hide command-and-control addresses. Targets include LiteLLM, Ollama, and Gotenberg. Lumen blocked all traffic to the servers and advises patching to versions like LiteLLM 1.83.7.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
