exploited miners to infect vmware horizon

Attackers didn’t leave the possibility to maximize their impact on such networks. It means that an organization might have only part of its network in the cloud the rest would be on-prem. The Expansion of Malware to Linux Systems : Many organizations choose a hybrid model of using cloud. Yet, some threats specifically seek vulnerable or available Linux machines in the cloud.

From our data, almost 98% of the cloud assets that Orca scans are running on Unix-like operating systems.Īs you might assume, this makes any kind of Linux malware relevant to most of the cloud assets. Many PaaS solutions offered by cloud providers are running on Linux distributions by default. The flexibility, agility, and scalability that Unix-like machines offer made them cloud native. Attackers may get an initial foothold and move laterally in the cloud account and deploy malware in a deeper strategic location. The initial attack vector doesn’t have to be an internet-facing asset. The most common attack vectors in cloud rely on finding assets with easy authentication (weak or leaked passwords), exploitable vulnerabilities and risky exposure to the internet.Īs published by CISA, the most used infection vectors in 2021 were stolen RDP credentials, brute force attacks, and vulnerability exploitation. In the cloud world it is a little bit different, attackers look for a different kind of unsafe “user” behavior – unmaintained assets and dangerously configured accounts. For example, malicious attachments to emails, malicious links in emails, or downloads from semi-legit sites.

In the on-prem world, the main infection vectors are based on user related actions. In this blog, we will discuss the main malware types you may encounter in your cloud with examples and ways to detect and protect your cloud from them.īut first, how does malware find its way into cloud assets? The Orca Security Research Pod collects data on common malware threats in the cloud, and discusses how you can detect, mitigate, and avoid them. As more organizations move their assets to the cloud, malware distributors are turning their attention to the cloud as well.

Exploited miners to infect vmware horizon