Login

News on Medial

This new Linux malware is targeting some major victims — Docker, Apache Hadoop, Redis and Confluence all under attack

TechradarTechradar · 8m
This new Linux malware is targeting some major victims — Docker, Apache Hadoop, Redis and Confluence all under attack

Hackers are targeting misconfigured servers running Docker, Confluence, and other services to install cryptocurrency miners. Researchers have discovered a malware campaign that utilizes various payloads to exploit vulnerable servers, including those running Apache Hadoop YARN, Docker, Confluence, and Redis. The attackers take advantage of an unauthenticated and remote OGNL injection vulnerability to execute code and gain access. The malware drops a cryptocurrency miner, spawns a reverse shell, and maintains persistent access to compromised hosts. The specific threat actor behind the campaign has not been identified, but the shell script payloads resemble those used by TeamTNT and WatchDog.

View Source

Comments

More Like this

Stealthy Linux rootkit found in the wild after going undetected for 2 years

Stealthy Linux rootkit found in the wild after going undetected for 2 years

Activision investigating password-stealing malware targeting game players

Activision investigating password-stealing malware targeting game players

Facebook messages hijacked to steal personal info and details

Facebook messages hijacked to steal personal info and details

A new Windows Defender zero-day is already being exploited to drop dangerous malware

A new Windows Defender zero-day is already being exploited to drop dangerous malware

SMBs are being hit with more malware attacks than ever, and many can't keep up

SMBs are being hit with more malware attacks than ever, and many can't keep up

iPhone users beware! THIS Trojan can empty your bank accounts: Details

iPhone users beware! THIS Trojan can empty your bank accounts: Details

Google Cloud Run is being targeted in a major new malware campaign — and the threats are on the rise

Google Cloud Run is being targeted in a major new malware campaign — and the threats are on the rise

CERT-In says global outage being leveraged to launch phishing attacks against CrowdStrike users

CERT-In says global outage being leveraged to launch phishing attacks against CrowdStrike users

China's biggest lender's US arm hit by ransomware attack

China's biggest lender's US arm hit by ransomware attack

Atlassian now gives startups a year of free access

Atlassian now gives startups a year of free access

Download the medial app to read full posts, comements and news.