A threat actor, presumably from Tunisia, has been linked to a new campaign targeting exposed Jupyter Notebooks in a two-fold attempt to illicitly mine cryptocurrency and breach cloud environments.
Dubbed Qubitstrike by Cado, the intrusion set utilizes Telegram API to exfiltrate cloud service provider credentials following a successful compromise.
“The payloads for the Qubitstrike campaign are
Related Post
- November 15, 2024
Researchers Warn of Privilege Escalation Risks in Google’s
Cybersecurity researchers have disclosed two security flaws in Google’s Vertex machine learning (ML) platform that, if successfully exploited, could allow
- November 15, 2024
Good Essay on the History of Bad Password
Stuart Schechter makes some good points on the history of bad password policies: Morris and Thompson’s work brought much-needed data
- November 15, 2024
Master Certificate Management: Join This Webinar on Crypto
In the fast-paced digital world, trust is everything—but what happens when that trust is disrupted? Certificate revocations, though rare, can
- November 15, 2024
Vietnamese Hacker Group Deploys New PXA Stealer Targeting
A Vietnamese-speaking threat actor has been linked to an information-stealing campaign targeting government and education entities in Europe and Asia