Pinned Tweet
[NEW RESEARCH] Kromtech Security Center found 17 malicious docker images stored on Docker Hub for a year. By pushing malicious images to a Docker Hub registry and pulling it from the victim’s system, hackers were able to mine 544.74 Monero (~$90000) More: kromtech.com/blog/security-c…
[NEW REPORT] How credit card thieves use free-to-play apps to launder their ill-gotten gains. kromtech.com/blog/security-c… @MayhemDayOne
[ICYMI] We have analyzed 19,411 active domains squatting on the Moz top 500 most visited websites. Almost 6,800 of those contain malicious content that may cause the loss of your personal data. Cybersquatting is a threat and we need to educate on it. kromtech.com/blog/security-c…
[NEW REPORT] WeightWatchers accidentally exposed a #Kubernets administration console allowing access to all their internal AWS infrastructure. More details here: kromtech.com/blog/security-c…
Kromtech retweeted
Finishing off our new research on #Kubernetes - shocked to see how many dockers are publicly available. Including one from a #NYSE company (2bn USD income/year), exposing ENTIRE (!) AWS infrastructure, keys, 46 S3 buckets, logs, passwords, secret keys etc. More details to come.
Kromtech Cybersquatting Research materials, scripts and tools are available now at our Github account.
github.com/kromtech/cybersqu…
#Cybersquatting fact No.1: One out of three squatted domains contain malicious content.
Meaning almost 6,800 out of 19,411 active domains squatting on the top 500 most visited domains. More details coming up today. #kromtech #cybersquatting #threat #scope 2018
The Board of Control for Cricket in India (BCCI) exposed personal sensitive data of several thousands Indian applicants in cricket seasons 2015-2018. Read more: mackeepersecurity.com/post/b…
Russian-based video surveillance solution leaked data via unprotected #MongoDB, with more than 825K users and partners info exposed. Read more at mackeepersecurity.com/post/r…










