Title: Hackers Target Qinglong Task Scheduler, Deploy Cryptominers on Developer Servers
In a recent cybersecurity incident, hackers have exploited vulnerabilities in the Qinglong open-source task scheduling tool, leading to the deployment of cryptominers on affected servers. This attack began in early February, prior to the public disclosure of security flaws at the end of the month.
The vulnerabilities, affecting versions 2.20.1 and older, allowed attackers to bypass authentication and execute malicious code. Qinglong, which is widely used by Chinese developers, has been forked over 3,200 times on GitHub, making it a significant target.
The impact of this attack is severe, with infected servers experiencing CPU usage spikes due to hidden processes running cryptomining software. Users are urged to update to the latest version of Qinglong, which addresses these security issues.
To protect against such threats, ensure that all software is updated regularly and monitor server activity for unusual processes.
Risk Level: High
Source: View Original Report
