More than 4,000 ElasticSearch servers, most hosted on AWS, have been found to be infected with two strains of malware aimed at point-of-sale terminals. The malware — AlinaPOS and JackPOS — has been around for at least five years but is now being widely sold on dark web malware sites. Elasticsearch is an open-source search and analytics engine that is fully indexed so searches are very fast. Amazon provides customers with a free T2 micro (EC2 / Elastic Compute Cloud) instance with up to 10 Gb of disk space.”]
Source: https://www.darkreading.com/cloud-security/aws-elasticsearch-servers-host-malware/a/d-id/736363