Aqua Security, the cloud activity firm has discovered a hacking campaign which has been going on for months now. They stated that the hackers are going through the internet to uncover Docker servers running API ports, which do not have a password. Kinsing, a new crypto-miner is then deployed and installed after the attackers make a breakthrough.

The<a href="https://blog.aquasec.com/threat-alert-kinsing-malware-container-vulnerability"> post</a> by Aqua Security stated that they have been tracking and keeping an eye on these well-planned attack whose primary target is unsecured Docker Daemon API ports. They added that these attacks are not few and far between and are occurring on a daily basis for months. They went on to add :
<blockquote>“In this attack, the attackers exploit a misconfigured Docker API port to run an Ubuntu container with the kinsing malicious malware, which in turn runs a crypto miner and then attempts to spread the malware to other containers and hosts.”</blockquote>
The malware Kinsing exploit the Docker installations resources to extract cryptocurrency. In order to cut out the security measures, disable and clear logs and infect multiple cloud systems with Kinsing malware, the container obliterates other malware on the same docker and perform lateral movements in the container network.  Go-resty, gopsutil, osext, diskv are few of the libraries used by the Golang -based Linux agent, Kinsing miner.
<h2>Aqua Security Suggestions on How to Safeguard Against The Hack</h2>
Aqua security advises the companies to be profound in the security settings of their docker instances, guard and not expose APIs online. It also recommends the use of firewall and VPN gateway to access admin endpoints.

Aqua also highlights this attack as another one that stands outside and a prime example of the growing threat to cloud-native environments. They believe that the hackers are taking the game up by a notch, by deploying larger containers and being more robust in their ambitious moves, with an element of sophistication not witnessed before.

You May Also Read.
<ul>
 	<li><a href="https://www.cryptoknowmics.com/news/deadly-malware-pose-serious-threat-to-us-military/">Deadly Malware Pose Serious Threat To US Military</a></li>
 	<li><a href="https://www.cryptoknowmics.com/news/vivin-attack-could-net-thousands-of-monero-coins-through-malware/">Vivin Attack Could Net Thousands of Monero Coins through Malware</a></li>
 	<li><a href="https://www.cryptoknowmics.com/malware/lazarus-hacker-group-returns-with-modified-crypto-stealing-malware/">Lazarus Hacker Group Returns with Modified Crypto Stealing Malware</a></li>
</ul>

Aqua Security Warns Company About the Kinsing Malware

In its published blog, Aqua Security warns the copanies about the kinsing malware and the hacks involving it which are going on for months now.

Zain is a fervid fan of bitcoin and has been meticulously covering the field for a fair amount of time now. An aficionado of Spider man, Liverpool and Slim Shady.

Aqua Security Warns Company About the Kinsing Malware

Top Picks