Cybersecurity Alert: ComfyUI Instances Targeted in Cryptocurrency Mining Attack
A recent cybersecurity incident has revealed an active campaign exploiting vulnerable ComfyUI instances, a popular platform for stable diffusion. Hackers are using a custom Python scanner to identify misconfigured setups, allowing them to remotely install malicious software. Once compromised, these systems are added to a botnet for illicit cryptocurrency mining, specifically targeting Monero and Conflux.
Currently, over 1,000 exposed ComfyUI instances are at risk, primarily affecting users in cloud environments. The attack not only siphons resources for mining but also poses significant security risks, as attackers can execute arbitrary code on compromised devices.
To protect against this threat, users are advised to secure their ComfyUI configurations, apply updates promptly, and monitor their systems for unusual activity.
Given the evolving nature of this attack, the risk level is assessed as High. Immediate action is recommended to mitigate potential damage.
Source: View Original Report
