Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining
Researchers studying cybersecurity are warning about a campaign that uses publicly accessible Selenium Grid services on the internet to mine cryptocurrencies illegally.
cloud safety SeleniumGreed is the moniker under which Wiz is monitoring the activity. The campaign is thought to have started at least in April 2023 and is directed towards older versions of Selenium (3.141.59 and before).
The majority of users are unaware that the Selenium WebDriver API allows complete machine interaction, such as file reading and downloading as well as remote command execution, according to Wiz researchers Avigayil Mechtinger, Gili Tikochinski, and Dor Laska.
This service does not have authentication enabled by default. This implies that a large number of instances that are available to the publ...