SeleniumGreed: How Hackers Mine Crypto Using Your Selenium Grid!
Cybersecurity researchers are warning about “SeleniumGreed,” an ongoing campaign exploiting misconfigured Selenium Grid services for illicit cryptocurrency mining. Publicly exposed instances can be accessed and abused, posing severe security risks.
Hot Take:
Who knew your automated browser tests could moonlight as cryptocurrency miners? Next thing you know, my toaster will be mining Bitcoin while I’m just trying to make breakfast!
Key Points:
- Ongoing campaign dubbed “SeleniumGreed” exploits older Selenium Grid services for crypto mining.
- Campaign targets versions 3.141.59 and prior, active since April 2023.
- Widespread misconfiguration allows unauthorized remote command execution.
- Attackers use a Base64-encoded payload to deploy XMRig miner.
- Over 30,000 instances potentially vulnerable to this exploit.
Already a member? Log in here