If you run #SugarCRM, there's active exploitation of a RCE to drop cryptomining malware.
https://sploitus.com/exploit?id=PACKETSTORM:170346&utm_source=rss&utm_medium=rss

Check for /var/tmp/sshd
#defender #infosec