Attackers increasingly using transfer.sh to host malicious code

For many years now, unsecured internet-facing Redis servers have been steadily getting co-opted by criminals to mine cryptocurrency, so the latest cryptojacking campaign spotted by Cado Labs researcher cannot be considered news. But one its elements points to a new trend: attackers have increasinly begun using the (legitimate) transfer.sh service to host malicious code. They say their telemetry shows an uptick in the malicious use of the service since the beginning of 2023 and advise … More →

The post …

attackers cado security campaign code criminals cryptocurrency cryptojacking don't miss host hot stuff internet labs latest malicious malware redis researcher servers service telemetry threats tips transfer.sh trend