Securing PostgreSQL from Cryptojacking Campaigns in Kubernetes

Originally published by CrowdStrike. PostgreSQL misconfiguration allows running shell commands on the underlying OS with the “COPY” SQL command and “pg_execute_server_program” roleKubernetes ingress can allow access to the PostgreSQL service, which can be targeted by the attackers to compromise pods and subsequently a clusterPostgreSQL is targeted by multiple opportunistic cryptojacking groups like WatchDog, TeamTNT and KinsingPostgreSQL is a powerful, open-source relational database manageme...

access attackers campaigns command compromise copy crowdstrike cryptojacking database kubernetes misconfiguration pods postgresql service shell sql teamtnt watchdog