Attackers are abusing an attack vector present in one of the most popular execution engines (Argo Workflows) to repurpose Kubernetes systems to mine cryptocurrencies. The attack exploits a vulnerability in the system of permissions of Argo Workflows machines connected to the internet, deploying malicious workflows that install Monero-based containers. Attackers Leveraging Argo Workflows for Crypto […]
Docker, a popular cloud computing integration solution, is making changes to its free-tier service due to cryptocurrency mining abuse. The service discontinued its “autobuild” feature due to misuse by bad actors, using it to mine cryptocurrencies in their servers. This is a modus operandi that is now affecting several cloud continuous integration platforms, including GitHub, […]