PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Pause off my cluster: DERO cryptojacking takes a new shape

wiz.io | blog | #cloud-security | #kubernetes | #container-security | #threat-research | #cryptojacking | #dero
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Research details an evolved DERO cryptojacking campaign abusing anonymous-access Kubernetes clusters to deploy UPX-packed miners from Docker Hub images, plus updated TTPs and IoCs.
Published
Collected

Related coverage

blog · wiz.io
Key takeaways from the Wiz 2023 Kubernetes Security Report
Highlights from Wiz's 2023 Kubernetes Security Report, based on 200,000+ scanned cloud accounts: new clusters face malicious scans within 22 minutes, kubelet endpoints sit exposed, cryptomining rises.
blog · wiz.io
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
blog · wiz.io
DevOps Tools Targeted for Cryptojacking
Wiz Threat Research exposes JINX-0132, a cryptojacking campaign targeting Nomad, Consul, Docker and Gitea — the first in-the-wild abuse of Nomad misconfigurations — living off GitHub tools.
blog · wiz.io
Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations
Wiz Research shows how a malicious model plus container escape could grant cross-tenant access on AI-as-a-Service platforms, and details its joint mitigations with Hugging Face.
blog · wiz.io
NamespaceHound: protecting multi-tenant K8s clusters
Wiz releases NamespaceHound, an open-source tool that detects risky namespace-crossing violations and anonymous access in multi-tenant Kubernetes clusters to harden tenant isolation.
blog · wiz.io
Announcing the Release of "Kubernetes Security for Dummies"
Wiz and Wiley release 'Kubernetes Security for Dummies,' covering cloud-native fundamentals, cluster hardening, container security, compliance automation and ten best practices.
Back