Cryptocurrency-mining AWS Lambda-specific malware spotted


What Is Cryptocurrency?

Cado Security says it has discovered a strain of malware specifically designed to run in AWS Lambda serverless environments and mine cryptocurrency.

The team admitted it doesn’t quite know how the software nasty, dubbed Denonia, is deployed, though you’re welcome to take a guess.

“It may simply be a matter of compromising AWS access and secret keys then manually deploying into compromised Lambda environments,” Cado’s Matt Muir suggested in a technical write-up on Wednesday.

While the security firm has only seen the malware running in AWS Lambda, it can be made to run in other Linux-flavored environments, Cado Security CTO and co-founder Chris Doman told The Register this week.

Read more…