Tesla Cloud Servers Hacked By Cryptojackers

Tesla paid Red Lock over $3,000 for discovering the hack as part of its bug bounty

Security researchers at cloud security firm RedLock released a report earlier today that revealed, among other things, that the an unprotected Kubernetes console belonging to the EV brand led to data exposure and mining activities.

Before discovering Tesla's security issue, RedLock reports that hackers had secretly infiltrated these organizations' public cloud environments to mine cryptocurrencies as well.

"The message from this research is loud and clear - the unmistakable potential of cloud environments is seriously compromised by sophisticated hackers identifying easy-to-exploit vulnerabilities", said Gaurav Kumar, CTO of RedLock and head of the CSI team. Organizations need a way to detect account compromises.

The attackers were able to hack Tesla's Kubernetes console, which it uses to manage its application containers, in part because there was no password protection enabled for the system. Hackers gained access to the electric auto company's Amazon cloud account, where they were able to view "sensitive data" such as vehicle telemetry.

It's only the latest example of several detected by cloud security outfit RedLock, which has tracked a series of Kubernetes admin consoles wide open to anyone looking. However, it doesn't appear that Tesla's data was the target of the hackers. This lapse in Tesla's security exposed access credentials for the company's Amazon Web Services (AWS) environment. For instance, the analysis shows that 66 percent of databases are not encrypted. While the attack was similar to the ones at Aviva and Gemalto, there were some notable differences.

Assassin's Creed Origins adds Discovery Tour mode
This includes targets, discovered territories, location and quest completion, Senu's perception, quest items, and papyri. The highlight addition is the new game plus mode, something Ubisoft first teased earlier this year .

Watch The JESSICA JONES Season 2 Franchise Trailer
The video isn't a full-on season 2 trailer, but there are plenty of snippets of new footage from the upcoming season. The first trailer was released in early February, which confirmed the season 2 premiere date on March 8, 2018.

Respect first, then gun control
As the NRA hero Alfred E Neumann so thoughtfully said, "What Me Worry"! There are facts...truths beyond those mentioned above. Jurisdictions like Chicago, for example, have implemented strict gun control laws but remain ridden with gun violence .

In addition, the cyber thieves performed cryptojacking using Tesla's cloud compute resources and employed specific techniques to evade detection. Instead, they installed mining pool software and configured the malicious script to connect to an "unlisted" or semi-public endpoint. They also hid the true IP address of their custom mining pool server behind CloudFlare, a free content delivery network (CDN) service.

According to the researchers, this technique makes it more hard for domain and IP-based threat detection systems to detect such activity. "However, security is a shared responsibility: Organizations of every stripe are fundamentally obliged to monitor their infrastructures for risky configurations, anomalous user activities, suspicious network traffic, and host vulnerabilities".

"We maintain a bug bounty program to encourage this type of research, and we addressed this vulnerability within hours of learning about it", the spokesperson said in a statement.

Kumar added that while breaches at cloud service providers were nearly never the fault of the host - Amazon, Microsoft, Google - security is a "shared responsibility". The security firm also found that 58 percent of organizations have "publicly exposed at least one cloud storage service" like Tesla did.

Related News:

  • Snapchat unveils gif stickers and tabs in upcoming new update

    Snap tells The Verge that GIF support is arriving today, while Android and iOS will both get the new Tabs feature soon. It is now adding tabs to the Friends and the Discover screen and this will supposedly make things easier for the users.
    Don't fall for this tax scam

    Don't fall for this tax scam

    They tell the taxpayer that a refund was deposited in error, and they give information to forward the money to their collection agency.
    Remains of OFW found in freezer in Kuwait arrive in PH

    Remains of OFW found in freezer in Kuwait arrive in PH

    Philippine officials say they are re-examining how to better detect and stop abuse of its workers overseas . It is believed she had already been killed before her body was placed in the freezer.
  • UK's farming to thrive outside EU

    UK's farming to thrive outside EU

    Some Conservative MPs and think tanks have also called for the United Kingdom to curb some farming standards as part of any new trade deal with the US.
    Donald Trump Takes To Twitter To Deny Latest Sexual Misconduct Allegations

    Donald Trump Takes To Twitter To Deny Latest Sexual Misconduct Allegations

    The story does not accuse the women of fabricating allegations against Trump, contradicting a claim he made on Tuesday. She alleges that while she and Trump waited for an elevator, he held her hand and began kissing her against her will.
    Willian on how he got the better of David Meyler

    Willian on how he got the better of David Meyler

    Two clean sheets. "But in the next two weeks we have to play massive games and we must be strong - Barcelona , United and City ". We started with great focus and concentration, will to score and wanted to go to the next round.
  • United States  students plan protests to demand gun control after mass shooting

    United States students plan protests to demand gun control after mass shooting

    Her friend Catherine Crocker booked a flight from Atlanta the day after one of the deadliest shootings in USA schools' history. As a result, many schools are now focusing on special guidance and counsel for students and their families.
    AP ready to give details of Centre's assistance: Naidu

    AP ready to give details of Centre's assistance: Naidu

    He reiterated that he would not comprised with the interests of the state and ready to go to any extent in this regard. Rao said 11 institutions and one super-speciality hospital would have to be established in the State by 2022.
    Aerial look at Ohio River floodwaters

    Aerial look at Ohio River floodwaters

    Monday She said the Williamstown Bridge, which had been closed on Sunday due to high water on the OH side, was open at 11:40 a.m. The flood warning for Parkersburg had been removed from the National Weather Service's website by 5 p.m.
  • Eagles coach Doug Pederson promotes Mike Groh to offensive coordinator

    Eagles coach Doug Pederson promotes Mike Groh to offensive coordinator

    Under Groh, wide receiver Nelson Agholor enjoyed a career-saving season with 62 catches for 768 yards and eight touchdowns. This news comes just a little over a week after the Eagles promoted Press Taylor to quarterbacks coach .
    Opec giants plan super group to stabilise oil market

    Opec giants plan super group to stabilise oil market

    OPEC and non-OPEC producers are restraining production to prop up prices under a deal that is to expire at the end of 2018. Brent sweet crude was up 52 cents, or 0.8 per cent at 65.36 dollars, after rising more than three per cent last week.
    Roger Federer officially returns to World No 1

    Roger Federer officially returns to World No 1

    But I was able to manage my nerves and the expectations. "It's unbelievable to be number one again". With the form he's now in, there are still a few milestones Federer could achieve.


Most liked

Renault Zoe receives new R110 electric motor
The 2018 Renault Zoe will debut at the Geneva Motor Show next month, with order books opening at Renault's United Kingdom dealers in the spring.

Cyclone Gita to drench large chunk of the country
The very worst winds are likely to be within a 900km circle and New Zealand is 1600km long. "This can prevent more damaging flooding if rain doesn't abate quickly", Grafton said.

Kripps and Kopacz win Olympic gold in two-man bobsled
It was just the second time in history that has happened - the first time also involved Canada , at Nagano in 1998. The have won six speedskating golds in Korea so far, and 11 of the 27 medals on offer.

Watch Elon Musk's Starlink Falcon 9 launch online HERE
It aims to offer broadband speeds comparable to fiber optic networks and also bring 5G-like service to billions around the world. SpaceX has responded that its plan meets all safety standards and allows for adequate buffers of space between other satellites.

Charles Barkley and Sterling K Brown to Host 'SNL' Episodes Next Month
He's usually a dramatic actor, so it'll be interesting to see his comedic chops, especially in a live sketch comedy setting. In addition to the acclaimed NBC drama, Brown has drawn praise for his role in the newly released " Black Panther " film.

England Win, New Zealand In Final
At the halfway stage, having posted 194 for seven, England had their answer - they needed to keep the Black Caps to 174 or below. However, the two finalists, Australia and New Zealand , are in hard-hitting form going into Wednesday's showdown at Auckland.

Hoffman Estates man charged with kidnapping 11-year-old Florida girl
Investigators say the pair headed north, and they tracked Johnson's phone to the Holiday Inn Express on Harrison Road. The girl's parents reported her as an endangered runaway around 10 a.m.

Flu deaths go up in Fayette County
Additionally, per the CDC, this year's vaccine offers good protection for children over six months to eight years of age. Doctors tell us there are four strains of flu, and you can get the flu a couple of times in the same season.

FBI Says It Failed To Investigate Tip On School Shooter
Rick Scott , R, called the FBI's failure to investigate the tip "unacceptable" and urged FBI Director Christopher Wray to resign. Attorney General Jeff Sessions ordered an immediate review to ensure "effective response to indications of potential violence".

Tiger Shroff in Baaghi 3, Confirmed
The film, which also stars Manoj Bajpayee and Prateik Babbar in pivotal roles, is scheduled to release on March 30, 2018. Tiger also has Karan Johar's Student Of The Year 2 and the Indian remake of Sylvester Stallone's Rambo in the pipeline.

Slovak ice hockey team goes home
Against the Slovakians the first time , Donato had both goals in the American's 2-1 victory to keep them afloat in Group B. The United States had a goal-scoring problem at the Olympics.

Patrick Brown kicks off bid to reclaim PC leadership
Brown addressed the sexual misconduct allegations against him, telling his campaign launch that he believes he's cleared his name. He registered to run for the party leadership again last Friday.

Star Wars: The Last Jedi Blu-ray includes 14 deleted scenes
Meanwhile the Balance of the Force feature looks to explain "why Rian Johnson chose to interpret its role in such a unique way". A new ABC News documentary covering the sound design in The Last Jedi takes an up-close look at the efforts of the foley crew.

New raids on Syria rebel enclave kill 45 civilians
On Jan. 20, it launched a major air and ground offensive, pounding the enclave with airstrikes and artillery on a daily basis. The YPG has controlled Afrin since 2012 when Syrian troops withdrew from it and other Kurdish-majority areas.

Purdue beats Penn State to snap three-game skid
He left the game after that as an irate Purdue coach Matt Painter screamed at two officials there must have been a foul. Dakota Mathias scored 18 points, the most he's scored since the Big Ten opener at Maryland on December 1.