Microsoft’s Azure Security Center has detected a new hacking campaign targeting the Kubeflow platform on Kubernetes. The campaign uses the XMRig cryptominer to mine for monero across multiple clusters. This is the first time Kubefl was singled out as the attack vector, according to Microsoft. An admin’s attempt to make the setup more convenient may have exposed the dashboard to the internet, thus giving the attacker a pathway into the service. The attack scaled quickly so that within two hours a container with the code was deployed.”]
Source: https://www.cuinfosecurity.com/kubeflow-targeted-in-xmrig-monero-cryptomining-campaign-a-14433