Login

News Post

This new Linux malware is targeting some major victims — Docker, Apache Hadoop, Redis and Confluence all under attack

TechradarTechradar · 7m
This new Linux malware is targeting some major victims — Docker, Apache Hadoop, Redis and Confluence all under attack

Hackers are targeting misconfigured servers running Docker, Confluence, and other services to install cryptocurrency miners. Researchers have discovered a malware campaign that utilizes various payloads to exploit vulnerable servers, including those running Apache Hadoop YARN, Docker, Confluence, and Redis. The attackers take advantage of an unauthenticated and remote OGNL injection vulnerability to execute code and gain access. The malware drops a cryptocurrency miner, spawns a reverse shell, and maintains persistent access to compromised hosts. The specific threat actor behind the campaign has not been identified, but the shell script payloads resemble those used by TeamTNT and WatchDog.

View Source

Comments

More Like this

Log analytics startup Parseable raises $2.75 Mn in seed round from Surge, others

Log analytics startup Parseable raises $2.75 Mn in seed round from Surge, others

Mistral AI makes its first large language model free for everyone

Mistral AI makes its first large language model free for everyone

AI21 Labs' new AI model can handle more context than most

AI21 Labs' new AI model can handle more context than most

xAI open-sources base model of Grok, but without any training code

xAI open-sources base model of Grok, but without any training code

xAI open sources Grok

xAI open sources Grok

What is DDOS attack? Malicious cyber attack that delayed Musk - Trump interview

What is DDOS attack? Malicious cyber attack that delayed Musk - Trump interview

Web apps and APIs were attacked more than ever last year

Web apps and APIs were attacked more than ever last year

Apple warns of mercenary spyware attacks in 98 countries

Apple warns of mercenary spyware attacks in 98 countries

WordPress websites are being hacked to hijack your browser — and then attack other sites

WordPress websites are being hacked to hijack your browser — and then attack other sites

How DDoSers used the HTTP/2 protocol to deliver attacks of unprecedented size

How DDoSers used the HTTP/2 protocol to deliver attacks of unprecedented size

Download the medial app to read full posts, comements and news.