Tag
high
advisory
AWS Potential Cryptomining via ECS Task Definition Deployment
1 TTP 5 IOCsAdversaries, after compromising AWS credentials, deploy cryptomining operations on Amazon ECS and AWS Fargate by registering task definitions with public high-CPU container images and then launching them, leading to unauthorized resource consumption and increased cloud costs.
Amazon ECS +1
cloud
aws
cryptomining
resource-hijacking
ecs
fargate
1t
5i
high
advisory
You do surprise me.exe: Unexpected Crypto-Miner in Hola Browser
3 rules 5 TTPs 4 IOCsSophos X-Ops discovered that Hola Browser version 1.251.91.0 was distributed with an undeclared crypto-mining executable, me.exe, due to a supply chain compromise, leading to resource hijacking on affected Windows systems.
Hola Browser
supply-chain-compromise
cryptomining
pua
windows
executable
3r
5t
4i
medium
advisory
Unusual EC2 Instance Creation with Unseen Instance Type
2 rules 1 TTPAn attacker may create new EC2 instances with previously unseen instance types, indicating potential unauthorized or suspicious activity such as cryptomining or data exfiltration.
EC2
cloud
anomaly
cryptomining
2r
1t