Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part of an emerging malware campaign designed to deliver a cryptocurrency miner and spawn a reverse shell for persistent remote access.
“The attackers leverage these tools to issue exploit code, taking advantage of common misconfigurations and

access apache apache hadoop atlassian atlassian confluence attackers campaign code confluence crypto cryptocurrency cryptocurrency miner crypto mining docker emerging exploit exploit code hackers hadoop issue malware malware campaign miner mining misconfigured persistent redis remote access reverse reverse shell running servers services shell targeting threat threat actors tools vulnerable yarn