CrowdStrike Discovers First-Ever Dero Cryptojacking Campaign Targeting Kubernetes
Tags
cmtmf-attack-pattern: Masquerading
attack-pattern: Cron - T1053.003 Dns - T1071.004 Dns - T1590.002 Malicious Image - T1204.003 Masquerading - T1655 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006 Connection Proxy - T1090 Masquerading - T1036 Rootkit - T1014 Masquerading Rootkit
Show in Graph
Common Information
Type Value
UUID 49f71ea7-bea2-4d33-8c65-b228246c5bd9
Fingerprint 252909fb90afbf98
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 7, 2024, midnight
Added to db Nov. 12, 2024, 11:48 a.m.
Last updated Nov. 17, 2024, 6:31 p.m.
Headline CrowdStrike Discovers First-Ever Dero Cryptojacking Campaign Targeting Kubernetes
Title CrowdStrike Discovers First-Ever Dero Cryptojacking Campaign Targeting Kubernetes
Detected Hints/Tags/Attributes 52/2/4
Source URLs
Redirection Url
Details Source https://www.crowdstrike.com/en-us/blog/crowdstrike-discovers-first-ever-dero-cryptojacking-campaign-targeting-kubernetes/
URL Provider
Details Provider Source level domain
Details crowdstrike.com www.crowdstrike.com
Attributes
Details Type #Events CTI Value
Details Domain 14 
entrypoint.sh
Details Domain 117 
ld.so
Details File 153 
config.json
Details IPv4 295 
8.8.8.8