BTC $74,746.58 -0.81%
ETH $2,116.52 -1.66%
BNB $688.20 -0.31%
XRP $1.09 -2.51%
SOL $85.88 -2.58%
TRX $0.3171 -0.48%
DOGE $0.0696 -0.64%
ADA $0.1767 -0.85%
BCH $237.07 -2.24%
LINK $10.56 -0.25%
HYPE $74.15 -1.19%
AAVE $130.90 +0.29%
SUI $0.8371 -0.50%
XLM $0.1464 -1.43%
ZEC $1,151.21 -7.06%
AAPL $350.98 +1.69%
AMZN $267.95 +2.21%
GOOGL $290.66 +0.69%
MSFT $545.90 +1.60%
META $643.65 +4.20%
NVDA $181.41 +0.24%
TSLA $378.33 +4.50%
SNDK $882.97 +4.65%
INTC $59.01 +3.69%
SPCX $141.74 +2.90%
MU $731.71 +4.66%
AMD $507.98 +10.73%
BTC $74,746.58 -0.81%
ETH $2,116.52 -1.66%
BNB $688.20 -0.31%
XRP $1.09 -2.51%
SOL $85.88 -2.58%
TRX $0.3171 -0.48%
DOGE $0.0696 -0.64%
ADA $0.1767 -0.85%
BCH $237.07 -2.24%
LINK $10.56 -0.25%
HYPE $74.15 -1.19%
AAVE $130.90 +0.29%
SUI $0.8371 -0.50%
XLM $0.1464 -1.43%
ZEC $1,151.21 -7.06%
AAPL $350.98 +1.69%
AMZN $267.95 +2.21%
GOOGL $290.66 +0.69%
MSFT $545.90 +1.60%
META $643.65 +4.20%
NVDA $181.41 +0.24%
TSLA $378.33 +4.50%
SNDK $882.97 +4.65%
INTC $59.01 +3.69%
SPCX $141.74 +2.90%
MU $731.71 +4.66%
AMD $507.98 +10.73%

黑客利用公共 DevOps 工具進行加密貨幣挖礦攻擊

2025-06-04 23:57:46

ChainCatcher 消息,安全公司 Wiz 發現代號 JINX-0132 的黑客組織正大規模利用 DevOps 工具配置漏洞進行加密貨幣挖礦攻擊。該攻擊主要針對 HashiCorp Nomad/Consul、Docker API 和 Gitea 等工具,約 25% 的雲環境存在風險。攻擊手法包括:利用 Nomad 預設配置部署 XMRig 挖礦軟體、透過 Consul 未授權 API 執行惡意腳本、控制暴露的 Docker API 創建挖礦容器。

app_icon
ChainCatcher 與創新者共建Web3世界