ECS Fargate cryptojacking (Campaign)
ID: 6cc59e05-d59c-5b1f-bd77-7e51c164bcfd
STIX ID: report--6cc59e05-d59c-5b1f-bd77-7e51c164bcfd
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2024-01-19
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
ECS Fargate cryptojacking — Datadog observed an attacker leveraging a compromised AWS IAM user access key to create hundreds of ECS Fargate clusters and task definitions that launched containers from ~40 malicious Docker Hub images running XMRig; thousands of containers ran and the campaign may have affected tens to hundreds of thousands of environments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.