Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

I know what you mined last summer: summarizing Summer '23 cryptomining activity

wiz.io | blog | #cloud-security | #threat-detection | #ioc | #cryptomining | #wiz-research | #xmrig

Summary

Wiz Research summarizes Summer 2023 cryptomining: seven campaigns using XMRig, CCminer and XMR-Stak-RX, entering via open Jupyter Notebooks and unpatched Apache Solr 8.1.1, with IOCs.
Published
Collected

original ↗

Related coverage

  1. Investing Together: Wiz Defend and Google Security Operations (wiz.io)
  2. IMDS Abused: Hunting Rare Behaviors to Uncover Exploits (wiz.io)
  3. From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover (wiz.io)
  4. Exposed JDWP Exploited in the Wild: What Happens When Debug Ports Are Left Open (wiz.io)
  5. SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining (wiz.io)
  6. Wiz launches support for Google Workspace, helping organizations secure Google Cloud identities (wiz.io)

back