Tainted, crypto-mining containers pulled from Docker Hub – TechCrunch

Security companies Fortinet and Kromtech found seventeen tainted Docker containers that were essentially downloadable images containing programs that had been designed to mine cryptocurrencies. Further investigation found that they had been downloaded 5 million times, suggesting that hackers were able to inject commands into insecure containers to download this code into otherwise healthy web applications. The researchers found the containers on Docker Hub, a repository for user images.

“Of course, we can safely assume that these had not been deployed manually. In fact, the attack seems to be fully automated. Attackers have most probably developed a script to find misconfigured Docker and Kubernetes installations. Docker works as a client/server architecture, meaning the service can be fully managed remotely via the REST API,” wrote researcher David Maciejak.

The containers are now gone, but the hackers may have gotten away with up to $90,000 in cryptocurrency, a small but significant amount for such a hack.

“Today’s growing number of publicly accessible misconfigured orchestration platforms like Kubernetes allows hackers to create a fully automated tool that forces these platforms to mine Monero,” said a writer of a report by Kromtech. “By pushing malicious images to a Docker Hub registry and pulling it from the victim’s system, hackers were able to mine 544.74 Monero, which is equal to $90,000.”

“As with public repositories like GitHub, Docker Hub is there for the service of the community. When dealing with open public repositories and open source code, we recommend that you follow a few best practices including: know the content author, scan images before running and use curated official images in Docker Hub and certified content in Docker Store whenever possible,” wrote Docker’s head of security David Lawrence in a Threatpost report.

Cool read from TC Source Link

Comments

Post a Comment

Popular posts from this blog

Google’s new Tour Creator lets students make their own VR tours – TechCrunch

Image
Google today launched a new tool for teachers and their students called Tour Creator, which allows anyone to create their own VR tour using imagery from Google’s Street View or their own 360-degree photos. The new app is designed to work with Google Cardboard and Google’s existing VR “field trips” app Expeditions . The goal with Expeditions is to let people virtually travel the world to see far off places they may never have the chance to visit in person – like Antarctica or Machu Picchu, for example. Google says that since Expeditions’ arrival in 2015, over three million students have virtually visited places around the globe. Now, the idea is to let students and teachers themselves build their own VR experiences and stories without needing technical knowledge. Instead, using Tour Creator, anyone can build an immersive 360-degree tour from their computer. To use the service, you click to get started, give the tour a name and upload a cover photo. You can then search through Go...
Read more

New malware highjacks your Windows clipboard to change crypto addresses – TechCrunch

Image
In what amounts to be an amazingly nefarious bit of malware, hackers have created an exploit that watches 2.3 million high-value crypto wallets and replaces the addresses in the Windows clipboard with an address associated with the hackers. In other words, you could paste your own wallet address – 3BYpmdzASG7S6WrpmrnzJCX3y8kduF6Kmc, for example – and the malware would subtly (or unsubtly) change it to its own private wallet. Because it happens in the clipboard most people wouldn’t notice the change between copying and pasting. Security researchers at BleepingComputer have found similar hijackers in the wild but this latest version is actively watching valuable wallets and trying grab bitcoin as they enter the accounts. Below is an example of the malware at work. The malware runs a massive, 83MB DLL file that masquerades as a Direct X service. Inside the DLL is a 2.5 million line text file full of bitcoin addresses. In the above test when cutting and pasting from an HTML page into W...
Read more

Bitcoin passes $7K bringing all 100 top coins up with it – TechCrunch

Image
Bitcoin is moving up, and it’s taking 99 of its best friends along for the ride. In the last 24 hours, every one of the top 100 coins by market cap was in the green with 84 of them posting gains of over 5 percent. At the time of writing, Bitcoin was sitting at $7,310, up 14 percent in the last 7 days and up almost 10 percent in the last 24 hours. CoinMarketCap Top 100 Bitcoin itself crossed the $7,000 mark for the first time in the last month, an indication but no sure sign that it might be shaking off a summer slump that’s seen prices plunge below $6,000 on more than one occasion. Bitcoin is quickly moving back toward early June norms around $7,500 though may meet resistance at $7,750 . In March, Bitcoin dipped below the $10,000 mark and it’s been unable to mount a rally back above that level in the months since. screenshot via CoinMarketCap They may not last, but mid-July’s gains aren’t just a Bitcoin story. Out of the top 100 coins, 24 coins made double digit gains in the l...
Read more