Hackers mainile cryptocurrency cloud servers Tesla
The company in the field of cybersecurity RedLock has published data on hacking the cloud service Amazon Web service (AWS), the user of which was Tesla.
Hackers gained access to the Tesla account on AWS by infiltrating the Kubernetes container, which is not password protected. The hackers then used The kubernetes container to mine cryptocurrencies for an unknown amount of time.
The RedLock CSI team demonstrated a similar version of AWS hacking for bitcoin mining (BTC) in October last year on the example of Aviva and Gemalta companies. These companies, as well as Tesla left access to the administrator console without a password.
Tesla hacking was well disguised: hackers did not use the already known mining pool, but instead used their own software to work with pools, and thus did not associate the mining script with any “end” point, which complicated the ability to detect this suspicious activity.
In addition, they also did not heavily exploit computing power and hid the IP address of the pool using CloudFlare.
The products of the company Tesla has used for the mining of cryptocurrencies in the past year. One of Tesla’s electric car owners reported that he was mining bitcoin with the help of his car.