Cryptomining Malware Moves into Software Containers by mrosenquist

View this thread on: hive.blog | peakd.com | ecency.com

security · @mrosenquist · Oct 17 '19

$6.77

Cryptomining Malware Moves into Software Containers

<html>
<p><img src="https://i.postimg.cc/44V9xPz1/Cryptomining-Malware-Moves-into-Software-Containers.jpg" width="640" height="426"/></p>
<p>Security researchers at <a href="https://unit42.paloaltonetworks.com/graboid-first-ever-cryptojacking-worm-found-in-images-on-docker-hub/">Palo Alto Networks</a> have discovered the Graboid worm that spreads through Docker software containers and mines Monero cryptocurrency for the attackers. This is a new tactic and territory for crypto-mining worms. It is the first time such malware has been detected traversing software containers. &nbsp;&nbsp;</p>
<p>Once a core image repository is infected, anytime the image is pulled and used, the malware goes with it and is spawned to maliciously consume resources for crypto-mining. Traditional security software rarely looks inside containers, so these instances can be active for as long as the container is in use. &nbsp;</p>
<h2>&nbsp;<strong>Security recommendations:</strong>&nbsp;</h2>
<ol>
  <li>Make sure the docker engine is not exposed to the internet without proper authentication controls&nbsp;</li>
  <li>Use whitelisting where possible to identify and limit allowable incoming traffic sources&nbsp;</li>
  <li>Tenaciously protect the software repositories from tampering or infection&nbsp;</li>
  <li>Only pull images from trusted repositories&nbsp;</li>
  <li>Setup monitoring of images and repositories to detect if they have been modified or acting in unauthorized ways &nbsp;</li>
</ol>
</html>

👍 kevinwong, buildawhale, themarkymark, fredrikaa, gtg, mangos, mrosenquist, upboater, bitshares101, culgin, aicurator, upmyvote, arcange, enforcer48, techslut, swiftcash, ultimus, espoem, remlaps-lite, gikitiki, goblu96, didic, jhonboss, imisstheoldkanye, mchavarriaot, cupofcoco321, mauricemikkers, raphaelle, msg768, greivin101, uplus, steem-oracle, swiftbot, padimakmur, jesus.christ, yggdrasil.laguna, benjemar, stemd
👎 xervetusi

`author`	mrosenquist
`permlink`	cryptomining-malware-moves-into-software-containers
`category`	security
`json_metadata`	{"tags":["security","news","technology","software","cybersecurity"],"image":["https://i.postimg.cc/44V9xPz1/Cryptomining-Malware-Moves-into-Software-Containers.jpg"],"links":["https://unit42.paloaltonetworks.com/graboid-first-ever-cryptojacking-worm-found-in-images-on-docker-hub/"],"app":"steemit/0.1","format":"html"}
`created`	2019-10-17 23:57:30
`last_update`	2019-10-17 23:57:30
`depth`	0
`children`	4
`last_payout`	2019-10-24 23:57:30
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	3.681 HBD
`curator_payout_value`	3.084 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	1,501
`author_reputation`	177,646,612,823,517
`root_title`	"Cryptomining Malware Moves into Software Containers"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,658,329
`net_rshares`	24,462,148,698,682
`author_curate_reward`	""

properties (23)vote details (39)

voter	rshares	pct
kevinwong	8,922,652,440,262	100%
mauricemikkers	1,367,045,306	100%
gtg	795,845,375,433	5%
bitshares101	105,478,269,298	50%
gikitiki	10,202,554,199	25%
arcange	44,806,289,308	3%
raphaelle	1,340,812,232	3%
mrosenquist	373,041,346,823	100%
mchavarriaot	1,782,649,904	100%
goblu96	7,232,566,842	100%
ultimus	13,010,659,234	100%
cupofcoco321	1,496,833,771	100%
techslut	36,253,345,776	7.5%
mangos	725,879,960,427	19%
benjemar	180,454,853	100%
msg768	1,020,285,989	5%
uplus	884,977,118	15%
fredrikaa	2,920,621,738,857	100%
jesus.christ	444,630,182	5%
themarkymark	3,036,987,202,897	15%
buildawhale	7,032,537,547,484	15%
espoem	11,084,445,173	5%
imisstheoldkanye	2,918,360,714	1%
upmyvote	52,306,655,008	15%
culgin	62,981,811,977	30%
didic	5,280,105,065	20%
upboater	157,356,774,993	15%
enforcer48	41,250,905,070	15%
jhonboss	3,648,291,397	100%
padimakmur	543,300,943	100%
steem-oracle	720,936,149	15%
remlaps-lite	10,757,158,207	100%
aicurator	55,198,746,582	15%
swiftcash	23,030,205,914	5%
swiftbot	577,223,393	5%
greivin101	1,002,927,842	100%
stemd	67,732,337	30%
yggdrasil.laguna	365,450,808	70%
xervetusi	-9,319,085	-10%

@cupofcoco321 · Oct 18 '19

$0.06

Great recommendations!

👍 mrosenquist, mchavarriaot

`author`	cupofcoco321
`permlink`	pzjurs
`category`	security
`json_metadata`	{"app":"steemit/0.1"}
`created`	2019-10-18 02:55:03
`last_update`	2019-10-18 02:55:03
`depth`	1
`children`	0
`last_payout`	2019-10-25 02:55:03
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.032 HBD
`curator_payout_value`	0.030 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	22
`author_reputation`	754,448,114,604
`root_title`	"Cryptomining Malware Moves into Software Containers"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,661,570
`net_rshares`	362,478,658,010
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
mrosenquist	0 B		360,791,534,626	100%
mchavarriaot	0 B		1,687,123,384	100%

@goblu96 · Oct 18 '19

$0.06

It was only a matter of time. Always secure your environments!!!

👍 mrosenquist, mchavarriaot

`author`	goblu96
`permlink`	pzjuca
`category`	security
`json_metadata`	{"app":"steemit/0.1"}
`created`	2019-10-18 02:45:48
`last_update`	2019-10-18 02:45:48
`depth`	1
`children`	0
`last_payout`	2019-10-25 02:45:48
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.031 HBD
`curator_payout_value`	0.031 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	64
`author_reputation`	895,122,805,291
`root_title`	"Cryptomining Malware Moves into Software Containers"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,661,419
`net_rshares`	355,338,715,038
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
mrosenquist	0 B		353,579,991,397	100%
mchavarriaot	0 B		1,758,723,641	100%

@tts · Oct 18 '19

To listen to the audio version of this article click on the play image.
[![](https://s18.postimg.org/51o0kpijd/play200x46.png)](http://ec2-52-72-169-104.compute-1.amazonaws.com/mrosenquist__cryptomining-malware-moves-into-software-containers.mp3)
Brought to you by [@tts](https://steemit.com/tts/@tts/introduction). If you find it useful please consider upvoting this reply.

properties (22)

`author`	tts
`permlink`	re-cryptomining-malware-moves-into-software-containers-20191018t004106
`category`	security
`json_metadata`	""
`created`	2019-10-18 00:41:06
`last_update`	2019-10-18 00:41:06
`depth`	1
`children`	0
`last_payout`	2019-10-25 00:41:06
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	374
`author_reputation`	-4,535,154,553,995
`root_title`	"Cryptomining Malware Moves into Software Containers"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,659,200
`net_rshares`	0

@ultimus · Oct 18 '19

$0.04

As software containers gained in popularity, it was just a matter of time before malware followed.

👍 mrosenquist, goblu96, mchavarriaot

`author`	ultimus
`permlink`	pzjsqy
`category`	security
`json_metadata`	{"app":"steemit/0.1"}
`created`	2019-10-18 02:11:24
`last_update`	2019-10-18 02:11:24
`depth`	1
`children`	0
`last_payout`	2019-10-25 02:11:24
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.033 HBD
`curator_payout_value`	0.005 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	98
`author_reputation`	6,664,676,750,516
`root_title`	"Cryptomining Malware Moves into Software Containers"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	91,660,840
`net_rshares`	374,397,434,216
`author_curate_reward`	""

properties (23)vote details (3)

voter	rshares	pct
mrosenquist	365,587,451,082	100%
mchavarriaot	1,722,561,895	100%
goblu96	7,087,421,239	100%