SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining
wiz.io | blog | #cloud-security | #threat-research | #cryptomining | #selenium | #xmrig | #exposed-services
Summary
Wiz Research documented SeleniumGreed, an active campaign exploiting exposed, unauthenticated Selenium Grid services to run reverse shells and install XMRig cryptominers via the WebDriver API.
- Published
- Collected
--- id: 7140 title: "SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining" source_domain: wiz.io source_url: "https://www.wiz.io/blog/seleniumgreed-cryptomining-exploit-attack-flow-remediation-steps" published_at: "2024-07-25T14:05:39Z" tags: ["cloud-security", "threat-research", "cryptomining", "selenium", "xmrig", "exposed-services"] phying_url: "https://phying.com/item/7140" lang: en --- # SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining ## Summary Wiz Research documented SeleniumGreed, an active campaign exploiting exposed, unauthenticated Selenium Grid services to run reverse shells and install XMRig cryptominers via the WebDriver API. ## Intelligence Metadata - **Sources:** wiz.io - **Published:** 2024-07-25T14:05:39Z - **Original:** https://www.wiz.io/blog/seleniumgreed-cryptomining-exploit-attack-flow-remediation-steps - **Phying News:** https://phying.com/item/7140