Crypto-Follow logo Crypto-Follow logo
Cryptoknowmics 2022-04-23 06:20:42

LemonDuck bot Points Docker Cloud Instances to Mine Cryptocurrency on Linux Systems

LemonDuck is a cryptocurrency mining bot that uses Docker cloud instances to mine cryptocurrency on Linux platforms. The LemonDuck botnet attempts to monetize its efforts, according to the CrowdStrike Cloud Risk Analysis team, by running concurrent campaigns to mine cryptocurrency like Monero. According to the researchers, because Docker is typically used to execute container workloads in the cloud, a misconfigured cloud event can expose a Docker API to the internet. An attacker can then use this API to launch a cryptocurrency miner inside a container controlled by the attacker. As cloud use grows across various businesses, attacks like this may become more common, according to Dave Cundiff, CISO of Cyvatar. According to Cundiff, Docker and other similar tools are extremely useful in improving day-to-day workflow for businesses to meet the growing demands of their customers. On the other hand, Cundiff believes that directors frequently underestimate the need for safety in containerized environments. Containers offer more secure settings, but Cundiff warns that “simple misconfigurations could enable these types of assaults.” “As demonstrated in the CrowdStrike study, an incorrectly exposed API to the internet allows attackers to exploit the target infrastructure before pivoting internally to other containers.” The finest first step in protecting the environment is to keep your surroundings clean.” While Docker provides a high l...

#
阅读免责声明 : 此处提供的所有内容我们的网站,超链接网站,相关应用程序,论坛,博客,社交媒体帐户和其他平台(“网站”)仅供您提供一般信息,从第三方采购。 我们不对与我们的内容有任何形式的保证,包括但不限于准确性和更新性。 我们提供的内容中没有任何内容构成财务建议,法律建议或任何其他形式的建议,以满足您对任何目的的特定依赖。 任何使用或依赖我们的内容完全由您自行承担风险和自由裁量权。 在依赖它们之前,您应该进行自己的研究,审查,分析和验证我们的内容。 交易是一项高风险的活动,可能导致重大损失,因此请在做出任何决定之前咨询您的财务顾问。 我们网站上的任何内容均不构成招揽或要约