HeadCrab bots pinch 1,000+ Redis servers to mine coins A sneaky botnet dubbed HeadCrab that uses bespoke malware to mine for Monero has infected at least 1,200 Redis servers in the last 18 months. The compromised servers span the US, UK, German, India, Malaysia, China and other countries, according to Aqua Security's Nautilus researchers, who discovered the HeadCrab malware and …
On one hand, this is obviously criminal activity.
On the other hand, anyone putting a completely unsecured server on today's internet without even so much as a firewall, also deserves a large beating, including fines.
Yes, the default is "unsecured" and that's bad, but then these weren't meant to be exposed to the internet. It's the responsibility of the people setting the server up to secure it.
Can't we get them on something like "encouraging criminal activity"?
Fortunately it's only stealing CPU time from them, but it could be worse. These could participate in a DDOS, spam relays, or something else that harms people other than the server owners.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2023
