Vulnerabilityhigh

JenkinsMiner made $3.4 million in a few months by compromising Jenkins servers

Security Affairsby @securityaffairsFeb 18, 2018 · 19:37 UTC (Feb 18, 2018)2 min read3 · 2 reads

Read at securityaffairs.com

Analyze CVE-2017-1000353 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-1000353

Tags: cve-2017-1000353 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-1000353	Unauthenticated Deserialization RCE in Jenkins CLI (≤2.56 / ≤2.46.1 LTS)	9.8	100%	KEVPoC	Jan 29, 2018 KEV Oct 2, 2025

From the original article

2 min read at securityaffairs.com

Hacker Group Makes $3 Million by Installing Monero Miners on Jenkins Servers A criminal organization has made $3. 4 million by compromising Jenkins servers and installing a Monero cryptocurrency miner dubbed JenkinsMiner. “The perpetrator, allegedly of Chinese origin, has been running the XMRig miner on many versions of Windows, and has already secured him over $3 million worth of Monero crypto-currency.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.