Cybersecurity researchers have released information about a new distributed denial-of-service (DDoS) assault campaign that targets inadequately configured Jupyter Notebooks.
A new distributed denial-of-service (DDoS) assault campaign that targets improperly configured Jupyter Notebooks has been made public by cybersecurity experts. The campaign—dubbed Panamorfi by cloud security company Aqua—launches a TCP flood DDoS attack using a Java-based application called mineping. Usually, mineping is a DDoS program made for servers running the Minecraft game. The attack chain includes using Jupyter Notebook instances that are open to the internet to run wget instructions that retrieve a ZIP archive from Filebin, a file-sharing website. Conn.jar and mineping.jar are the two Java archive (JAR) files included in the ZIP package. A Discord channel can be connected to, and the mineping.jar package can be launched using the conn.jar file. The goal of this attack is to send a lot of TCP connections in an attempt to exhaust the target server’s resources.
Aqua researcher Assaf Morag clarified, “This attack aims to consume the resources of the target server by sending a large number of TCP connection requests.” “The Discord channel has the results written to it.” A threat actor by the name of Yawixooo, who maintains a public repository on GitHub with a file revealing the Minecraft server settings, has been connected to the attack effort. Jupyter notebooks with internet access have been the focus of attackers before. A threat actor from Tunisia by the name of Qubitstrike was seen breaking into Jupyter Notebooks in October 2023 in order to mine cryptocurrency illegally and gain access to cloud infrastructures.
Also read: Achieving Rapid Outcomes with AI-Driven Cloud Analytics
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News is the premier platform dedicated to delivering the latest news, updates, and insights from the CIO industry. As a trusted source in the technology and IT sector, we provide a comprehensive resource for executives and professionals seeking to stay informed and ahead of the curve. With a focus on cutting-edge developments and trends, CIO News serves as your go-to destination for staying abreast of the rapidly evolving landscape of technology and IT. Founded in June 2020, CIO News has rapidly evolved with ambitious growth plans to expand globally, targeting markets in the Middle East & Africa, ASEAN, USA, and the UK.
CIO News is a proprietary of Mercadeo Multiventures Pvt Ltd.
