article thumbnail

Chinese Group Targeting Vulnerable Cloud Providers, Applications

Data Breach Today

Crypto Mining Campaign Targets Public Cloud Environments, Increases Security Risks Cybersecurity researchers say a Chinese for-profit threat group tracked as 8220 Gang is targeting cloud providers and poorly secured applications with a custom-built crypto miner and IRC bot.

Cloud 157
article thumbnail

Pacha Group declares war to rival crypto mining hacking groups

Security Affairs

Two hacking groups associated with large-scale crypto mining campaigns, Pacha Group and Rocke Group , wage war to compromise as much as possible cloud-based infrastructure. org is in this blacklist and it is known that Rocke Group has used this domain for their crypto-mining operations. .

Mining 70
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Threat Group TeamTNT Returns with New Cloud Attacks

eSecurity Planet

A retired threat actor has returned with new attacks aimed at the cloud, containers – and encryption keys. These cybercriminals are known for their creativity and ability to target cloud environments, as they introduced new techniques in 2020 that hadn’t been seen before. How to Protect Against Cloud, Container Threats.

Cloud 120
article thumbnail

After ChatGPT, Anonymous Sudan took down the Cloudflare website

Security Affairs

The hacktivist group Anonymous Sudan claimed responsibility for the massive distributed denial-of-service (DDoS) attack that took down the website of Cloudflare. “ To be clear, there was no Cloudflare breach. ” reads the message published on the group’s Telegram channel.

Mining 131
article thumbnail

TeamTNT cybercrime gang expands its arsenal to target thousands of orgs worldwide

Security Affairs

The financially motivated TeamTNT hacking group expanded its arsenal with new tools used to target thousands of victims worldwide. Researchers from AT&T Alien Labs uncovered a new campaign, tracked as Chimaera, conducted by the TeamTNT group , aimed at organizations worldwide. ” reads the analysis published by AT&T.

Mining 104
article thumbnail

Atlassian Confluence zero-day CVE-2023-22515 actively exploited in attacks

Security Affairs

” According to the advisory, the vulnerability doesn’t impact Atlassian Cloud sites. The software firm also recommends checking instances for the following indicators of compromise: unexpected members of the confluence-administrator group unexpected newly created user accounts requests to /setup/*.action

Mining 128
article thumbnail

Nearly 50,000 IPs compromised in Kubernetes clusters by TeamTNT

Security Affairs

Researchers from Trend Micro reported that about 50,000 IPs were compromised across multiple Kubernetes clusters in a cryptojacking campaign conducted by TeamTNT group. The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs. sh) used by the TeamTNT group.

Mining 130