Microsoft has spotted a new, widespread, ongoing attack targeting Kubernetes clusters running Kubeflow instances. The attack is similar to a cryptocurrency mining attack that Microsoft reported last June. Microsoft: Attack is still active, any new clusters that run Kubefl could be compromised. Attackers are using TensorFlow pods to mine Monero and ETH, while mining for Monero, while using the open-source XMRIG Monero miner. The attackers are using a Tensorflow pod a TensorFlow container to scoop up details about the environment, such as CPU and GPU mining.
Source: https://threatpost.com/microsoft-cryptomining-kubeflow/166777/

