Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?
SeleniumGreed: How Hackers Mine Crypto Using Your Selenium Grid!
Cybersecurity researchers are warning about “SeleniumGreed,” an ongoing campaign exploiting misconfigured Selenium Grid services for illicit cryptocurrency mining. Publicly exposed instances can be accessed and abused, posing severe security risks.
Hot Take:
Who knew your automated browser tests could moonlight as cryptocurrency miners? Next thing you know, my toaster will be mining Bitcoin while I’m just trying to make breakfast!
Key Points:
- Ongoing campaign dubbed “SeleniumGreed” exploits older Selenium Grid services for crypto mining.
- Campaign targets versions 3.141.59 and prior, active since April 2023.
- Widespread misconfiguration allows unauthorized remote command execution.
- Attackers use a Base64-encoded payload to deploy XMRig miner.
- Over 30,000 instances potentially vulnerable to this exploit.
Already a member? Log in here