Connect with us

Tech

Microsoft warns of crypto mining attacks on Kubernetes clusters

Published

on

Microsoft warns of crypto mining attacks on Kubernetes clusters

Microsoft is warning of a series of ongoing attacks that compromise Kubernetes clusters running Kubeflow machine learning (ML) instances to deploy malicious containers that mine Monero and Ethereum cryptocurrencies.

The attacks began in late May when Microsoft security researchers observed a surge in deployments of TensorFlow machine learning modules.

“The explosion of deployments across the various clusters was simultaneous,” said Microsoft senior security researcher Yossi Weizman.

“This indicates that the attackers scanned those groups beforehand and kept a list of potential targets, who were then attacked at the same time.”

Kubernetes clusters used to mine Monero and Ethereum

While the pods were legitimate from the official Docker Hub repository, the attackers modified them to mine cryptocurrency in compromised Kubernetes clusters by deploying ML pipelines using the Kubeflow pipes platform.

To gain initial access to the clusters and deploy the cryptocurrency miners, the attackers use Kubeflow dashboards exposed to the internet, which should only be open to local access.

Threat actors deploy at least two separate pods on each of the hacked clusters: one for CPU mining and one for GPU mining. ]

XMRig is used to mine Monero using the CPU, while Ethminer is installed to mine Ethereum on the GPU.

Malicious pods used in this active campaign are named using the sequential-pipeline- {random pattern} Pattern.

“The attack is still active and new Kubernetes clusters running Kubeflow are compromised,” Weizman warned.

Kubeflow pipes
Kubeflow Pipelines (Microsoft)

Continuation of previous attacks

This campaign follows a similar campaign by April 2020, which also abused powerful Kubernetes clusters as part of a large-scale crypto mining campaign.

Unlike this campaign, when attackers used Kubeflow Pipelines to deploy ML pipelines, the April 2020 attacks abused Jupyter notebooks.

Although Microsoft detected several other campaigns targeting Kubernetes clusters in the past exploiting Internet-exposed services, the April 2020 campaign was the first time an attack specifically targeted Kubeflow environments.

Administrators are advised to always enable authentication on Kubeflow dashboards if exposing them to the internet cannot be avoided and to monitor their environments (containers, images, and the processes they run).

In related news, Unit 42 researchers also shared information about Siloscape, the first malware to target Windows containers, with the ultimate goal of compromising and blocking Kubernetes clusters.

Unlike other malicious programs that target cloud environments that primarily focus on cryptojacking, Siloscape exposes the compromised infrastructure to a wider range of malicious activities.

These include ransomware attacks, credential theft, data exfiltration, and even very disastrous supply chain attacks.

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Advertisement
Advertisement

Lifestyle

32 cute summer date ideas for every type of couple 32 cute summer date ideas for every type of couple
LifeStyle13 hours ago

32 cute summer date ideas for every type of couple

A big date is always in style, but there is something about the summer that makes planning a meeting even...

15 naturally sweetened desserts for when you’re cutting back on sugar 15 naturally sweetened desserts for when you’re cutting back on sugar
LifeStyle1 day ago

15 naturally sweetened desserts for when you’re cutting back on sugar

About a year ago, I realized (or just came out of denial …) that I needed to do something about...

What are carbohydrates?  Are they really the enemy?  Let’s find out What are carbohydrates?  Are they really the enemy?  Let’s find out
LifeStyle1 day ago

What are carbohydrates? Are they really the enemy? Let’s find out

Editor’s note: McKel Hill, MS, RDN, LDN is a dietitian and founder of Nutrition stripped away. Over the years, I...

Pea salad with mint and microgreens Pea salad with mint and microgreens
LifeStyle1 day ago

Pea salad with mint and microgreens

** This recipe is from our Tastemakers interview with Kennesha Buycks. Read the full story here! ** The Pea Salad...

Roasted Mushrooms with Thyme and Smoked Salt Roasted Mushrooms with Thyme and Smoked Salt
LifeStyle1 day ago

Roasted Mushrooms with Thyme and Smoked Salt

** This recipe is from our Tastemakers interview with Kennesha Buycks. Read the full story here! ** The post Roasted...

Roasted Mushrooms with Thyme and Smoked Salt Roasted Mushrooms with Thyme and Smoked Salt
LifeStyle1 day ago

Roasted Mushrooms with Thyme and Smoked Salt

** This recipe is from our Tastemakers interview with Kennesha Buycks. Read the full story here! ** The post Roasted...

15 quick and healthy dinner recipes to get you through the week 15 quick and healthy dinner recipes to get you through the week
LifeStyle1 day ago

15 quick and healthy dinner recipes to get you through the week

Even the most avid home cooks can occasionally go blank – sometimes, you fall into a race and just can’t...

Instagram store M’sian selling homemade tahini cookies Instagram store M’sian selling homemade tahini cookies
LifeStyle2 days ago

Instagram store M’sian selling homemade tahini cookies

With many IG companies popping up these days, fresh, locally made cookies from various recipes are one of the things...

Dinner will resume on June 21, but with a limit of just two people Dinner will resume on June 21, but with a limit of just two people
LifeStyle2 days ago

Dinner will resume on June 21, but with a limit of just two people

The Ministry of Health (MOH) announced last Thursday (June 10) that Singapore is moving into Phase 3 (Heightened Alert). While...

Moving on to pizza deliveries during MCO Moving on to pizza deliveries during MCO
LifeStyle2 days ago

Moving on to pizza deliveries during MCO

Crackhouse Comedy Club (Crackhouse) has been home to local comedians, including Dr. Jason Leong, Joanne Kam, Hannah Azlan, and Kavin...

Advertisement

Sport

PH shooter is the twelfth Olympian in the country PH shooter is the twelfth Olympian in the country
Sports1 min ago

PH shooter is the twelfth Olympian in the country

A second-generation shooter came to Team Philippines bound for the Tokyo Olympics, obtaining a free pass through the squares of...

Danielle Hunter: I am ‘100%’ recovered from a neck injury Danielle Hunter: I am ‘100%’ recovered from a neck injury
Sports9 mins ago

Danielle Hunter: I am ‘100%’ recovered from a neck injury

nach reworking his contract, Danielle hunter reported for the vikings minicamp this week. The accomplished pass-rusher did not participate, but...

Showering from Canadiens Will Isolate For 14 Days After Positive COVID Test Showering from Canadiens Will Isolate For 14 Days After Positive COVID Test
Sports24 mins ago

Showering from Canadiens Will Isolate For 14 Days After Positive COVID Test

Montreal Canadiens Head coach Dominique Ducharme will have to be quarantined for 14 days before rejoining the team after testing...

Yankees’ Gio Urshela recovers from bat splinter to eye and home run ahead in win Yankees’ Gio Urshela recovers from bat splinter to eye and home run ahead in win
Sports30 mins ago

Yankees’ Gio Urshela recovers from bat splinter to eye and home run ahead in win

Gio Urshela found out the hard way Saturday how dangerous broken bats can be. He was batting in the second...

Will MLB umpires begin checking pitchers for foreign substances on Monday? Will MLB umpires begin checking pitchers for foreign substances on Monday?
Sports31 mins ago

Will MLB umpires begin checking pitchers for foreign substances on Monday?

Major League Baseball umpires will reportedly begin checking pitchers for foreign substances on Monday, according to ESPN’s Jesse Rogers. Pitchers...

Baldwin highlights ‘lucky shot’ comment to build motivation as Gilas fights Korea again Baldwin highlights ‘lucky shot’ comment to build motivation as Gilas fights Korea again
Sports45 mins ago

Baldwin highlights ‘lucky shot’ comment to build motivation as Gilas fights Korea again

Justine Baltazar had 11 points and nine rebounds to lead Gilas PH’s charge against Indonesia. —PHOTO COURTESY OF FIBA After...

Kawhi reportedly not going to Phoenix, rehabbing at home Kawhi reportedly not going to Phoenix, rehabbing at home
Sports52 mins ago

Kawhi reportedly not going to Phoenix, rehabbing at home

It appears the Los Angeles Clippers will be without Kawhi Leonard for at least the first two games of the...

Report: Leonard will continue to rehab at home, will not travel with Clippers Report: Leonard will continue to rehab at home, will not travel with Clippers
Sports1 hour ago

Report: Leonard will continue to rehab at home, will not travel with Clippers

Los Angeles Clippers star Kawhi Leonard will reportedly not travel with the team to Phoenix and will instead continue to...

Blackhawks would be interested in Jack Eichel Blackhawks would be interested in Jack Eichel
Sports1 hour ago

Blackhawks would be interested in Jack Eichel

There are already enough teams interested in Acorn jack, and it looks like Chicago can be added to the mix....

Young PH archers aim for Tokyo tickets Young PH archers aim for Tokyo tickets
Sports1 hour ago

Young PH archers aim for Tokyo tickets

With little expectation, a young band of Filipino archers set out in search of Olympic spots starting Saturday at their...

Advertisement

Entertainment

‘The Big Leap’ Creator, EP & Stars Tease Fox’s Ballet Drama – ATX – News Block ‘The Big Leap’ Creator, EP & Stars Tease Fox’s Ballet Drama – ATX – News Block
Entertainment4 mins ago

‘The Big Leap’ Creator, EP & Stars Tease Fox’s Ballet Drama – ATX – News Block

On Saturday, several key creatives behind The big jump He appeared for a virtual ATX panel, teasing the first season...

Royal Ascot Fashion 2021: Royals and Celebrity Photos Royal Ascot Fashion 2021: Royals and Celebrity Photos
Entertainment13 mins ago

Royal Ascot Fashion 2021: Royals and Celebrity Photos

A royal occasion! After the coronavirus pandemic kept crowds away from Royal Ascot in 2020, the event made a strong...

Naya Rivera’s Son Josey Graduates From Pre-K as Ryan Dorsey Celebrates: ‘Proud Daddy’ Naya Rivera’s Son Josey Graduates From Pre-K as Ryan Dorsey Celebrates: ‘Proud Daddy’
Entertainment26 mins ago

Naya Rivera’s Son Josey Graduates From Pre-K as Ryan Dorsey Celebrates: ‘Proud Daddy’

Naya Rivera’s Son Josey Graduates From Pre-K as Ryan Dorsey Celebrates: ‘Proud Daddy’

Paul Walker’s daughter’s meadow looks stunning at ‘F9’ premiere Paul Walker’s daughter’s meadow looks stunning at ‘F9’ premiere
Entertainment35 mins ago

Paul Walker’s daughter’s meadow looks stunning at ‘F9’ premiere

“You don’t turn your back on the family.” The late Paul walkerdaughter of Meadow, paid tribute by walking the red...

Lawyer Claims He ‘Verified’ Erika Jayne Stole Money From Thomas Girardi, Alleges RHOBH Star Received Over $ 20 Million Lawyer Claims He ‘Verified’ Erika Jayne Stole Money From Thomas Girardi, Alleges RHOBH Star Received Over $ 20 Million
Entertainment41 mins ago

Lawyer Claims He ‘Verified’ Erika Jayne Stole Money From Thomas Girardi, Alleges RHOBH Star Received Over $ 20 Million

Credit: Milla Cochran / startraksphoto.com, SURQ / BACKGRID The attorney hired to investigate Erika jayneAssets explain why your investigation needs...

KUWTK: Kim Kardashian talks about the Van Jones and Maluma romance rumors after Soulja Boy fired his shot too! KUWTK: Kim Kardashian talks about the Van Jones and Maluma romance rumors after Soulja Boy fired his shot too!
Entertainment47 mins ago

KUWTK: Kim Kardashian talks about the Van Jones and Maluma romance rumors after Soulja Boy fired his shot too!

In the midst of her divorce from Kanye West, Kim Kardashian has linked up with a number of different men,...

Queen Elizabeth II attends Royal Ascot 2021: photo Queen Elizabeth II attends Royal Ascot 2021: photo
Entertainment56 mins ago

Queen Elizabeth II attends Royal Ascot 2021: photo

To the races! Queen Elizabeth II returned to Royal Ascot after having to skip it last year due to the...

New photos from John Cena’s ‘Peacemaker’ set reveal vigilante actor New photos from John Cena’s ‘Peacemaker’ set reveal vigilante actor
Entertainment1 hour ago

New photos from John Cena’s ‘Peacemaker’ set reveal vigilante actor

New photos from the set of the upcoming HBO Max series Pacifier starring John Cena reveals actor Freddie Stroma as...

Lauren Burnham, Arie Luyendyk Jr. bring their daughter home from the hospital Lauren Burnham, Arie Luyendyk Jr. bring their daughter home from the hospital
Entertainment1 hour ago

Lauren Burnham, Arie Luyendyk Jr. bring their daughter home from the hospital

Welcome home! Lauren Burnham other Arie Luyendyk Jr.The newborn daughter left the hospital on Saturday, June 19. “The best early...

Stacey Abrams on political office, the right to vote, June 19th – Tribeca – News Block Stacey Abrams on political office, the right to vote, June 19th – Tribeca – News Block
Entertainment2 hours ago

Stacey Abrams on political office, the right to vote, June 19th – Tribeca – News Block

Stacey Abrams hinted at a future political office (no wonder) defended a compromise on the voting rights bill “because we...

Advertisement

Tech

The best smartwatch deals before Prime Day on Apple Watch and Galaxy Watch Active 2 The best smartwatch deals before Prime Day on Apple Watch and Galaxy Watch Active 2
Tech7 mins ago

The best smartwatch deals before Prime Day on Apple Watch and Galaxy Watch Active 2

This story is part of Amazon Prime Day 2021, CNET’s guide to everything you need to know and how to...

Google Force Installs Massachusetts MassNotify COVID App for Android Google Force Installs Massachusetts MassNotify COVID App for Android
Tech11 mins ago

Google Force Installs Massachusetts MassNotify COVID App for Android

Google is forcibly installing a Massachusetts COVID-19 tracking app on residents’ Android devices without an easy way to uninstall it....

Best Outdoor Projection Screens 2021 Best Outdoor Projection Screens 2021
Tech2 hours ago

Best Outdoor Projection Screens 2021

Best outdoor projection screens Me more 2021 The best outdoor projectors are ideal for watching movies or the latest shows...

Best Cases for AirPods Pro 2021 Best Cases for AirPods Pro 2021
Tech2 hours ago

Best Cases for AirPods Pro 2021

Best Cases for AirPods Pro Me more 2021 You love your AirPods Pro and would like to protect the case...

Lawmakers Weren’t ‘Creative or Enthusiastic’ Enough to Fix Big Tech Antitrust Laws Lawmakers Weren’t ‘Creative or Enthusiastic’ Enough to Fix Big Tech Antitrust Laws
Tech2 hours ago

Lawmakers Weren’t ‘Creative or Enthusiastic’ Enough to Fix Big Tech Antitrust Laws

CEOs of big tech companies like Apple have been “allowed to do whatever they want,” according to Rep. David Cicilline...

Google Force Installs Massachusetts MassNotify COVID App for Android Google Force Installs Massachusetts MassNotify COVID App for Android
Tech2 hours ago

Google Force Installs Massachusetts COVID-19 App on Resident Phones

Google is forcibly installing a Massachusetts COVID-19 tracking app on residents’ Android devices without an easy way to uninstall it....

Best Prime Day AirPods Deals: Save on AirPods, AirPods Pro and AirPods Max Best Prime Day AirPods Deals: Save on AirPods, AirPods Pro and AirPods Max
Tech3 hours ago

Best Prime Day AirPods Deals: Save on AirPods, AirPods Pro and AirPods Max

This story is part of Amazon Prime Day 2021, CNET’s guide to everything you need to know and how to...

Prime Day Chromebook deals: the best we’ve found so far, starting at $ 169 Prime Day Chromebook deals: the best we’ve found so far, starting at $ 169
Tech3 hours ago

Prime Day Chromebook deals: the best we’ve found so far, starting at $ 169

This story is part of Amazon Prime Day 2021, CNET’s guide to everything you need to know and how to...

NBA Playoffs – Watch and Stream Bucks vs. Nets Game 7 on TNT NBA Playoffs – Watch and Stream Bucks vs. Nets Game 7 on TNT
Tech4 hours ago

NBA Playoffs – Watch and Stream Bucks vs. Nets Game 7 on TNT

The 2021 NBA playoffs are in full swing, with pivotal games between the best teams every day. They are broadcast...

Best Prime Day 2021 Ring Deals – Save $ 170 on a Refurbished Ring Video Doorbell Elite Best Prime Day 2021 Ring Deals – Save $ 170 on a Refurbished Ring Video Doorbell Elite
Tech4 hours ago

Best Prime Day 2021 Ring Deals – Save $ 170 on a Refurbished Ring Video Doorbell Elite

This story is part of Amazon Prime Day 2021, CNET’s guide to everything you need to know and how to...

Advertisement
Advertisement