Hackers Target Microsoft Azure Servers to Illegally Mine Crypto

Friday, 12/06/2020 | 11:32 GMT by Arnab Shome
  • These servers are generating massive computing power needed for machine learning applications.
Hackers Target Microsoft Azure Servers to Illegally Mine Crypto
Bloomberg

The machine learning cluster of Microsoft Azure cloud computing services has become the recent target of hackers for mining digital currencies.

In a blog post published on Wednesday, the technology giant revealed the attack on its services which allowed perpetrators to mine Cryptocurrencies at the expense of the customers who rented Microsoft’s cloud computing services.

Machine learning needs massive computing powers which often pushes third-party developers to rent cloud computing services instead of maintaining hardware.

Hackers simply exploited misconfigured nodes to mine crypto by redirecting the computing powers to mine crypto instead of performing the originally designated tasks of running machine learning codes.

Similar to other crypto jacking incidents, the hijackers mined Monero on Microsoft servers.

According to the Redmond-headquartered company, compromised clusters it discovered counted in “tens”

The company specified that the infected clusters were running Kubeflow, an open-source framework for machine-learning applications in Kubernetes. This application is used to deploy scalable applications across a large number of computers.

The changes in the systems made using a vulnerability on a dashboard which can only be accessed by the administrators.

“Azure Security Center has detected multiple campaigns against Kubernetes clusters in the past that have a similar access vector: an exposed service to the Internet,” Yossi Weizman, a security research software engineer at Microsoft, noted. “However, this is the first time that we have identified an attack that targets Kubeflow environments specifically.”

Enterprise servers are often becoming targets

Cryptojacking becomes popular with the skyrocketing value of digital currencies. Though mostly confined to personal computers, hackers are also targeting enterprise servers to make more profits using massive computing power.

Just last month, a security firm report confirmed that at least 1,000 enterprise computers were targeted by the hackers to illegally mine digital currencies.

The machine learning cluster of Microsoft Azure cloud computing services has become the recent target of hackers for mining digital currencies.

In a blog post published on Wednesday, the technology giant revealed the attack on its services which allowed perpetrators to mine Cryptocurrencies at the expense of the customers who rented Microsoft’s cloud computing services.

Machine learning needs massive computing powers which often pushes third-party developers to rent cloud computing services instead of maintaining hardware.

Hackers simply exploited misconfigured nodes to mine crypto by redirecting the computing powers to mine crypto instead of performing the originally designated tasks of running machine learning codes.

Similar to other crypto jacking incidents, the hijackers mined Monero on Microsoft servers.

According to the Redmond-headquartered company, compromised clusters it discovered counted in “tens”

The company specified that the infected clusters were running Kubeflow, an open-source framework for machine-learning applications in Kubernetes. This application is used to deploy scalable applications across a large number of computers.

The changes in the systems made using a vulnerability on a dashboard which can only be accessed by the administrators.

“Azure Security Center has detected multiple campaigns against Kubernetes clusters in the past that have a similar access vector: an exposed service to the Internet,” Yossi Weizman, a security research software engineer at Microsoft, noted. “However, this is the first time that we have identified an attack that targets Kubeflow environments specifically.”

Enterprise servers are often becoming targets

Cryptojacking becomes popular with the skyrocketing value of digital currencies. Though mostly confined to personal computers, hackers are also targeting enterprise servers to make more profits using massive computing power.

Just last month, a security firm report confirmed that at least 1,000 enterprise computers were targeted by the hackers to illegally mine digital currencies.

About the Author: Arnab Shome
Arnab Shome
  • 7315 Articles
  • 133 Followers
About the Author: Arnab Shome
Arnab Shome is an electronics engineer-turned-financial editor. He holds a Bachelor of Technology from the National Institute of Technology, Agartala. He entered the retail trading industry about a decade ago, covering the cryptocurrency market for Finance Magnates, and later expanded his coverage to include forex and CFDs as well. His work at Finance Magnates includes C-level interviews, data-driven analysis, opinion pieces, and scoops of industry exclusives. He also contributes to Finance Magnates’ quarterly industry report. Area of coverage: 1. CFD broker-related news 2. Industry-related Regulatory updates and developments 3. New retail trading trends 4. Prop trading industry updates 5. Executive interviews Education: Bachelor of Technology - National Institute of Technology, Agartala (India)
  • 7315 Articles
  • 133 Followers

More from the Author

CryptoCurrency

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|} !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}