cryptomining Archives

Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining

30Apr

By RBNo Comments

News

Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining

The Qinglong open-source work scheduling tool has two authentication bypass vulnerabilities that hackers are using to install cryptocurrency on developers' systems. According to researchers at cloud-native application security firm Snyk, exploitation began in early February before the security flaws were made public at the end of the month. Chinese engineers frequently use the self-hosted, open-source time management tool Qinglong. It has more than 19,000 ratings on GitHub and has been forked more than 3,200 times. The two security flaws can be chained to enable remote code execution and affect Qinglong versions 2.20.1 and earlier: CVE-2026-3965: A misconfigured rewriting rule accidentally exposes protected admin endpoints via an unauthenticated path by mapping "/open/" reque...

Hackers hijack OpenMetadata apps in Kubernetes cryptomining attacks

Attackers use serious vulnerabilities related to remote code execution and authentication to target OpenMetadata workloads in an ongoing Kubernetes cryptomining operation. Data scientists and engineers can use OpenMetadata, an open-source metadata management platform, to find and classify data assets in their company, such as files, databases, tables, and services. The security flaws in OpenMedata versions 1.2.4 and 1.3.1 that were exploited in these attacks (CVE-2024-28255, CVE-2024-28847, CVE-2024-28253, CVE-2024-28848, and CVE-2024-28254) were corrected one month ago on March 15. First to identify the attacks, Microsoft claims that since early April, the five vulnerabilities have been actively used to take control of OpenMedata workloads that are exposed to the Internet and ar...

OpenSSH Trojan Campaign Targets IoT and Linux Systems

Security experts have identified a sophisticated assault operation that targets Linux-based systems and Internet of Things (IoT) devices by utilizing both open-source and bespoke tools. In a recent blog post, Microsoft claimed that the attackers used a modified version of OpenSSH to take over infected systems and install crypto mining software. An established criminal infrastructure is behind the attack campaign, and its command and control (C2) server is a Southeast Asian financial institution's subdomain read more OpenSSH Trojan Campaign Targets IoT and Linux Systems. Stay one step ahead of cyber threats with ReconBee.com. Explore our comprehensive coverage of recent cyber attacks, cybersecurity awareness, and the latest cybersecurity news to safeguard your digital world.