A build server’s CPU stays near 100% after hours. Fans are loud. Firewall logs show steady outbound connections to a known mining pool. Files on the server open normally, and nobody has found a ransom note. What is the most likely activity?

Analyze indicators of malicious activity

ARansomware that has not displayed its note yetBCryptominingCA distributed denial-of-service against the build serverDA failed backup job

Pick an answer. You’ll see if it’s right. The longer explanation is what a plan opens.

Why

28 items in the public index.