Cryptojacking: Understanding and defending against cloud compute resource abuse | Microsoft Security Blog
Tags
cmtmf-attack-pattern: Resource Hijacking
maec-delivery-vectors: Watering Hole
attack-pattern: Data Conditional Access Policies - T1556.009 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Password Guessing - T1110.001 Phishing - T1660 Phishing - T1566 Python - T1059.006 Resource Hijacking - T1496 Social Media - T1593.001 Software - T1592.002 Tool - T1588.002 Brute Force - T1110 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 120b27c4-6a8f-433d-a215-d38f2459c3a8
Fingerprint a4731b98c78fc085
Analysis status DONE
Considered CTI value 1
Text language
Published July 25, 2023, 10 a.m.
Added to db Aug. 12, 2023, 2:15 a.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Cryptojacking: Understanding and defending against cloud compute resource abuse
Title Cryptojacking: Understanding and defending against cloud compute resource abuse | Microsoft Security Blog
Detected Hints/Tags/Attributes 79/3/15
Source URLs
Redirection Url
Details Source https://www.microsoft.com/en-us/security/blog/2023/07/25/cryptojacking-understanding-and-defending-against-cloud-compute-resource-abuse/
URL Provider
Details Provider Source level domain
Details microsoft.com www.microsoft.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 173 ✔ Microsoft Security Blog https://microsoft.com/security/blog/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 13 
nanopool.org
Details Domain 7 
nicehash.com
Details Domain 11 
supportxmr.com
Details Domain 3 
hashvault.pro
Details Domain 2 
zpool.ca
Details Domain 1 
herominers.com
Details Domain 6 
f2pool.com
Details Domain 16 
minexmr.com
Details Domain 7 
moneroocean.stream
Details Domain 1 
miner.rocks
Details Domain 107 
aka.ms
Details Domain 1373 
twitter.com
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 24 
DEV-0139
Details Url 22 
https://aka.ms/threatintelblog.
Details Url 15 
https://twitter.com/msftsecintel.