Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

A large-scale attack campaign discovered in the wild has been exploiting Kubernetes (K8s) Role-Based Access Control (RBAC) to create backdoors and run cryptocurrency miners.
"The attackers also deployed DaemonSets to take over and hijack resources of the K8s clusters they attack," cloud security firm Aqua said in a report shared with The Hacker News. The Israeli company, which dubbed the attack

access access control aqua attack attackers backdoors campaign cloud cloud security clusters control cryptocurrency cryptocurrency mining exploited exploiting hacker hijack israeli k8s kubernetes large miners mining rbac report resources role role-based access control run scale security