Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Kinsing Malware Targets Oracle WebLogic And Docker APIs For Crypto Mining

Calendar Sep 19, 2022 • User Avatar Anthony Pell
1 min read
11.Locks IsometricPattern Esm H500
Topics%20covered

Topics Covered

malware security issues botnet Docker threat actors crypto mining WebLogic

Malicious actors such as Kinsing are taking advantage of both recently disclosed and older security flaws in Oracle WebLogic Server to deliver cryptocurrency-mining malware.

 

Cybersecurity company Trend Micro said it found the financially-motivated group leveraging the vulnerability to drop Python scripts with capabilities to disable operating system (OS) security features such as Security-Enhanced Linux (SELinux), and others.

The operators behind the Kinsing malware have a history of scanning for vulnerable servers to co-opt them into a botnet, including that of Redis, SaltStack, Log4Shell, Spring4Shell, and the Atlassian Confluence flaw (CVE-2022-26134).

The link for this article located at The Hacker News is no longer available.

Your message here
Your message here