Kinsing crypto mining campaign targets 75 cloud-native applications

The Kinsing cryptojacking operation, discovered five years ago, continues to target cloud-native environments for cryptocurrency mining. Threat actors exploit remote code execution vulnerabilities in 75 web applications and container systems like Docker and Kubernetes. The attack chain involves infection scripts, including those for both Windows and Linux/Unix servers, and drops various binaries, some variations of the Kinsing malware and XMRig for Monero mining.