Kinsing Cryptojacking Hits Kubernetes Clusters via Misconfigured PostgreSQL

The threat actors behind the Kinsing cryptojacking operation have been spotted exploiting misconfigured and exposed PostgreSQL servers to obtain initial access to Kubernetes environments.
A second initial access vector technique entails the use of vulnerable images, Sunders Bruskin, security researcher at Microsoft Defender for Cloud, said in a report last week.
Kinsing has a storied history of

access cloud clusters cryptojacking defender defender for cloud environments exploiting exposed history images initial access kinsing kubernetes kubernetes clusters microsoft microsoft defender microsoft defender for cloud postgresql report researcher security security researcher servers threat threat actors vulnerable