SilentBob cryptomining campaign (Campaign)
ID: 2002479b-6c63-578f-90a2-e6379445e673
STIX ID: report--2002479b-6c63-578f-90a2-e6379445e673
Feed Name: Wiz Cloud Threat Landscape
Date Published: 2023-07-13
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
A cloud-focused worm/campaign (attributed to TeamTNT/SilentBob patterns) aggressively targets container and cloud services across CSPs—compromising JupyterLab, Docker APIs, Kubernetes, Redis, Hadoop, web servers and SSH—to steal cloud credentials (including IMDS abuse), deploy cryptomining malware (XMRig, Tsunami), and perform resource hijacking; multiple tools and IoCs were observed and published by security vendors.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.