TeamTNT, a recently uncovered hacking group, is weaponizing Weave Scope, a cloud monitoring tool. The group is using the tool to help install cryptominers in cloud environments, reports from Microsoft and Intezer. The hacking group uses botnets to help steal Amazon Web Services credentials. Microsoft has tracked two images deployed by the hackers as part of this campaign. Weave Works issued an advisory about how to ensure that its tool is not used by hackers. The current campaign has been active since at least mid-August, Microsoft says.”]
Source: https://www.govinfosecurity.com/hackers-use-cloud-monitoring-tool-to-install-cryptominers-a-14976