Kinsing crypto mining campaign targets 75 cloud-native applications

An attack campaign dubbed Kinsing that targets cloud-native environments to deploy cryptocurrency mining malware is still going strong after five years, according to a research report by cloud security firm Aqua Security

The threat actors behind the operation compromise publicly facing servers by exploiting remote code execution vulnerabilities and misconfigurations in 75 web applications and container systems such as Docker and Kubernetes.

While Kinsing is not a new attack campaign and security companies have written many detailed analyses about its …

applications aqua aqua security attack campaign cloud cloud-native cloud-native applications cloud-native environments cloud security code code execution compromise crypto cryptocurrency cryptocurrency mining cryptocurrency mining malware crypto mining deploy environments exploiting facing kinsing malware mining misconfigurations remote code remote code execution remote code execution vulnerabilities report research security servers threat threat actors vulnerabilities