Palo Alto Networks discovers first-of-its-kind cryptojacking worm

By VARINDIA - 2019-10-18

Palo Alto Networks discovers first-of-its-kind cryptojacking worm

Research from Unit 42, the Palo Alto Networks threat intelligence team, have identified a new first-of-its-kind cryptojacking worm, Graboid that spread using Docker software containers.

 

Docker is a platform-as-a-service solution that allows developers to deploy, test, and package applications in containers. The worm spread to more than 2,000 unsecured Docker hosts to mine for Monero.

 

Monero is an open-source cryptocurrency that allows users to conceal nearly all details of transactions. By contrast, all Bitcoin transactions are public, traceable and permanently stored in the network.

 

While there have been incidents of cryptojacking malware spreading as a worm, this is the first time a cryptojacking worm has spread using containers in the Docker Engine (community edition).

 

A malicious actor initially gained foothold through unsecured Docker daemons, where a Docker image was first installed to run on the compromised host. Malware was downloaded from command and control (C2) servers. It was is deployed to mine for Monero, to query for new vulnerable hosts from C2 servers and to pick the worms next random target.

 

According to the research, each miner was active 63% of the time on average, and each mining period lasted for 250 seconds. This type of malicious activity is difficult to detect as most traditional endpoint protection software does not inspect data and activities inside containers.

 

Docker worked in tandem with Unit 42 to remove the malicious container images. While the worm does not involve sophisticated tactics, techniques or procedures, it can periodically pull new scripts from C2s. This means it can easily repurpose itself to ransomware or malware to compromise the host.

 

If a more potent worm was created to take a similar infiltration approach, it could cause much greater damage. As such, Unit 42 asserts that organisations must safeguard their Docker hosts.

 

Recommendations

 

The report’s recommendations to avoid being compromised included:

 

* Never expose a docker daemon to the internet without a proper authentication mechanism. The engine is not exposed to the internet.

* Use Unix socket to communicate with Docker daemon locally or use SSH to connect to a remote docker daemon.

* Use firewall rules to whitelist the incoming traffic to a small set of sources.

* Never pull Docker images from unknown registries or unknown user namespaces.

* Frequently check for any unknown containers or images in the system.

* Cloud security solutions such as Prisma Cloud or Twistlock can identify malicious containers and prevent cryptojacking activities.


 CIO  - SPEAK
Start-Up and Unicorn Ecosystem
 SOFTWARE  Placeholder image
Microsoft partners with ONE Championship to boost and reinvent digital fan experience

Microsoft partners with ONE Championship to boost and reinvent digital fan experience

ONE Championship (ONE), and Microsoft have announced a strategic partn...

Dell Technologies introduces new IT Infrastructure and Cloud capabilities to edge environments

Dell Technologies introduces new IT Infrastructure and Cloud capabilities to edge environments

Dell Technologies has announced two new VxRail systems—including...

Stratbeans brings AI-based proctoring solution for online examinations

Stratbeans brings AI-based proctoring solution for online examinations

Stratbeans has introduced AI-based proctoring solutions for educational institutions to he...

VARINDIA SIITF
SOUTHERN INDIA INFORMATION TECHNOLOGY FAIR (SIITF) -2018
BANGALURU
VARIndia - Star Nite Awards
STAR NITE AWARDS(SNA) - 2018
NEW DELHI
VARINDIA - OITF
ODISHA INFORMATION TECHNOLOGY FAIR(OITF)-2019
BHUBANESWAR
VARINDIA - WIITF
WESTERN INDIA INFORMATION TECHNOLOGY FAIR(WIITF) - 2019
MUMBAI
 INDUSTRY EVENTS Placeholder image
HUAWEI’S WI-FI 6 TO OUTPERFORM OTHER PRODUCTS IN THE INDUSTRY

HUAWEI’S WI-FI 6 TO OUTPERFORM OTHER PRODUCTS IN THE INDUSTRY

Committed to helping enterprise organizations to expand boundaries of their business and f...

Hpe Discover 2020: Virtual Experience Addresses Top Customers, Partners & Alliances -  helping recovery and accelerating your transformation

Hpe Discover 2020: Virtual Experience Addresses Top Customers, Partners & Alliances - helping recovery and accelerating your transformation

In today's situation the entire communication is moving towards virtual. HPE Discover...


Copyright varindia.com @1999-2020 - All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of Kalinga Digital Media Pvt. Ltd. is prohibited.
Other Initiatives : www.mybrandbook.co.in | www.spoindia.org

advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription advertisement video production, home video distributors, home video company, List of PC Magazines, Best online PC Magazines, Top Online PC Magazines in India, Best online PC Magazines in India, Best PC Magazine, PC Magazine Subscription