2 November 2024
Hackers Used ‘Ghost’ Server To Mine Cryptocurrency
GhostB has confirmed that it has been attacked by hackers and they abused the vulnerabilities in popular infrastructure tool Salt.
The firms such as Ghost, LineageOS, and Digicert are the new victims of cryptocurrency mining attacks. The infected system gets attacked by malware that gains control over its computing powers for mining cryptocurrencies.
The malware has got access to the Ghost (Pro) sites and Ghost.org billing services.
The blogging platform Ghost has more than 2 million installs and 750,000 registered users. Its team soon detected flaws in the Salt configuration management framework. The attempt made to mine cryptocurrency led to a spike in CPUs and overloaded most of their system and that helped to issue the action immediately.
Ghost has customers such as Mozilla, NASA, and DuckDuckGo but assured that their customer information and credentials weren’t infiltrated during the incident.
The company shared on its status page,
“All traces of the crypto-mining virus were successfully eliminated yesterday, all systems remain stable, and we have not discovered any further concerns or issues on our network. The team is now working hard on remediation to clean and rebuild our entire network.”
Saltstack, the developer of Salt has released two updates to deal with the vulnerabilities in its tool as it is widely used by data centers and in cloud-based environments for server configuration and monitoring.
Ghost isn’t the first company that has fallen prey to the cryptocurrency miners. Many government agencies and businesses have been the victims of the crypto-jacking attacks over the past few years.
Discussion
0 comments