Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

Tesla Cloud P0wnd, Mining for Cryptogold →

February 21, 2018 by Marc Handelman in Information Security, Container Insecurity, Infosec Incompetence

via the inimitable Dan Goodin, writing at Ars Technica, describes in detail the overtaking of electric vhecle and power-storage manufacturer front-runner Tesla's Cloud by miscreants unknown - in the nefarious effort to mine for crytogold. All of this via a report, published by RedLock. The vector for the attack is reportedly an un-secured Kubernetes deployment...

'The initial point of entry for the Tesla cloud breach, Tuesday's report said, was an unsecured administrative console for Kubernetes, an open source package used by companies to deploy and manage large numbers of cloud-based applications and resources.' - via Dan Goodin, writing at Ars Technica

February 21, 2018 /Marc Handelman
Information Security, Container Insecurity, Infosec Incompetence
  • Newer
  • Older