Tesla's Cloud Servers Hacked to mine Cryptocurrency

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://3.bp.blogspot.com/-_-DHR-4CzhQ/Wo0UDrPISAI/AAAAAAAAAX8/9Gj4kymKR00dnx372wft1ljNKZKrI5NZACLcBGAs/s1600/Tesla-Servers-Hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Kubernetes Consoles Breached" border="0" data-original-height="455" data-original-width="1250" height="232" src="https://3.bp.blogspot.com/-_-DHR-4CzhQ/Wo0UDrPISAI/AAAAAAAAAX8/9Gj4kymKR00dnx372wft1ljNKZKrI5NZACLcBGAs/s640/Tesla-Servers-Hacked.png" title="Kubernetes Consoles Breached" width="640" /></a></div> <br /> Hackers have breached Tesla cloud servers used by the company's engineers and have installed malware that mines the <a href="http://www.hackerschronicle.com/search/label/Cryptocurrency" target="_blank">cryptocurrency</a>. The incident took place last year when hackers gained access to Tesla's Kubernetes server, an open-source application used by large companies to manage API and server infrastructure deployed on cloud hosting providers.<br /> <br /> Cloud security firm RedLock —whose experts discovered the hacked server— said hackers found a "pod" inside the <a href="http://www.hackerschronicle.com/search/label/Kubernetes" target="_blank">Kubernetes </a>console that stored login credentials for one of Tesla's AWS cloud infrastructure.<br /> <br /> RedLock says the <a href="http://www.hackerschronicle.com/search/label/AWS" target="_blank">AWS </a>buckets appeared to have been storing sensitive data such as telemetry, but a Tesla Motors spokesperson told in an email the data was from "internally-used engineering test cars only." While there's no evidence intruders stole any data, they did install a mining application that utilized the vast computational resources of Tesla's AWS servers to mine the <a href="http://www.hackerschronicle.com/search/label/Monero" target="_blank">Monero cryptocurrency</a>.<br /> <br /> A Tesla spokesperson told that the company received a notification about the incident and secured the server immediately. RedLock said today the incident took place because Tesla engineers forgot to secure the Kubernetes console with an access password.<br /> <br /> "We maintain a bug bounty program to encourage this type of research, and we addressed this vulnerability within hours of learning about it," Tesla said. "The impact seems to be limited to internally-used engineering test cars only, and our initial investigation found no indication that customer privacy or vehicle safety or security was compromised in any way.”<br /> <br /> It is very clear that these hackers knew what they were doing, as they set up a private mining pool to use for their illegal mining operations only, hid the mining pool behind CloudFlare, configured the mining software to listen for commands on a non-standard port, and throttled the mining software to use only a small portion of <a href="http://www.hackerschronicle.com/search/label/Tesla" target="_blank">Tesla's</a> AWS CPU resources. All of these configuration changes were made to avoid detection. Because they used a custom mining pool, it is unclear how much money this hacker group made.</div>

AWS Cryptocurrency Hacking News Kubernetes Monero News Tesla Tesla's Cloud Servers Hacked to mine Cryptocurrency

Hackers have breached Tesla cloud servers used by the company's engineers and have installed malware that mines the cryptocurrency ....

Read more »

New search engine launched to find Hackable Servers

<div dir="ltr" style="text-align: left;" trbidi="on"> <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody> <tr><td style="text-align: center;"><a href="https://2.bp.blogspot.com/-ygIHDdjWdkw/WogTJo0L0gI/AAAAAAAAD8M/2bal_es_ERgMl1tLqEgYBLNtBUwix_9RACLcBGAs/s1600/Hackable-Servers.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="422" data-original-width="750" height="360" src="https://2.bp.blogspot.com/-ygIHDdjWdkw/WogTJo0L0gI/AAAAAAAAD8M/2bal_es_ERgMl1tLqEgYBLNtBUwix_9RACLcBGAs/s640/Hackable-Servers.jpg" width="640" /></a></td></tr> <tr><td class="tr-caption" style="text-align: center;">New search engine launched to find Hackable Servers</td></tr> </tbody></table> <br /> We all know very well that more and more users are simply choosing to save their data on servers. The advantages are many, although there may also be disadvantages. As today in this article, I will tell you people about a search engine that lets you find hackable servers very easily.<br /> <br /> <b>This Search Engine Lets You Find Hackable Servers Easily</b><br /> Every time we use more servers to store our data. It is a very interesting option to have them always present. In addition, we avoid filling physical disks and our computer. However, not all are safe. Many have vulnerabilities and possible failures that put our data at risk. Today we will talk about <a href="http://www.hackerschronicle.com/search/label/BuckHacker" target="_blank">BuckHacker</a>, a search engine that helps us find if a server can be hacked easily.<br /> <b><br /></b> <b>BuckHacker</b><br /> Leaving private data on exposed <a href="http://www.hackerschronicle.com/search/label/AWS" target="_blank">AWS </a>servers is not as weird as we might think. Security researchers and <a href="http://www.hackerschronicle.com/search/label/Cyber%20Crime" target="_blank">cybercriminals </a>can access this data easily using the right tools. To further facilitate this process, some developers have created this tool called <a href="https://www.buckhacker.com/" target="_blank">BuckHacker</a>, which allows to search for exposed servers.<br /> <br /> At the time we talked about another similar tool, called Shodan, which also allowed to know vulnerabilities in servers. It also included an option to find sensitive information on routers or IP cameras. BuckHacker is similar. Its function is to find Amazon servers that are exposed.<br /> <br /> The anonymous developers of this tool indicate that their goal is to increase the security associated with repositories and code projects. They claim that there are many companies that were hit by having wrong permits.<br /> <br /> This search engine allows you to search for pirated servers using the name of the file. In addition, it also returns the entries labeled “Access Denied” and “The specified deposit does not exist”.<br /> <br /> The results are stored in a database, which can then be searched by other users. According to the developers, the project is currently in the early stages of development and is quite unstable.<br /> <br /> In short, BuckHacker is a search engine that allows us to find possible Amazon servers exposed. However, at the moment, according to sources, there is no information about the launch of BuckHacker.</div>

AWS BuckHacker Hacking Tools News S3 New search engine launched to find Hackable Servers

New search engine launched to find Hackable Servers We all know very well that more and more users are simply choosing to save their d...

Read more »