Nukem384 News: Tesla Hacked For Cryptocurrency!
75 views · Published 21 February 2018 · 2:35 · Indexed 27 October 2026
Channel: nukem384 · 2018 · News & Politics
Nukem384 News has moved! Watch news videos on my new channel below! https://www.youtube.com/channel/UCEsViLqG5zxZcN87PGseoSg?sub_confirmation=1 Tesla isn't immune to the plague of cryptocurrency mining hijacks, it seems. Security researchers at RedLock have reported that intruders gained access to Tesla's Kubernetes console (where it deploys and manages containerized apps) without needing a password, exposing the EV brand's login credentials for Amazon Web Services. From there, the attackers both abused Tesla's cloud resources for cryptojacking and accessed private data held in Amazon's S3 service. The culprits were creative, too. While many of these mining attempts rely on a public mining pool, the perpetrators here installed mining pool software an d pointed a script to reach an 'unlisted' destination. The move made it harder to simply block the cryptojacking based on internet addresses. The intruders also masked the address of their mining pool server through CloudFlare, and minimized processor use to avoid giving away its presence. RedLock said it notified Tesla right away when it discovered the breach, and that the automaker has already patched the flaw. It's not clear at this point what private data was involved, although this doesn't necessarily mean customer data. We've asked Tesla for comment on the incident and will let you know if it can share more. There doesn't appear to have been much damage at first glance, but the intrusion continues a recent trend of companies and even militaries leaving sensitive info relatively unprotected. RedLock pointed out that there have been "hundreds" of instances like this at other companies. While the solutions in these cases are sometimes straightforward, that they're necessary at all suggests it'll take a while before companies are diligent about preventing slip-ups like this. Update: Tesla has gotten in touch with the extent of the intrusion. It said it fixed the flaw within "hours," and that the effect appears to be limited to "internally-used engineering test cars." Your personal data should be safe, then. You can read the full statement below. "We maintain a bug bounty program to encourage this type of research, and we addressed this vulnerability within hours of learning about it. The impact seems to be limited to internally-used engineering test cars only, and our initial investigation found no indication that customer privacy or vehicle safety or security was compromised in any way." Source: https://www.engadget.com/2018/02/20/tesla-cryptojacking-report/ https://electrek.co/2018/02/20/tesla-cloud-hijacked-hackers-mine-cryptocurrencies/ Last few articles: Nukem384 News: Pyeongchang - We Own the Pipe! https://youtu.be/XPe57wnZ8Lg Nukem384 News: Tesla Model 3 Delay, Again https://youtu.be/adcwqvsma6I =============================================================================== Hello! My name is Darrell. I'm just a regular guy who likes editing and uploading videos to Youtube! I really like teaching people how to do any and everything I have experience doing. I also feel that current events is very important in our changing world, so I also like to talk about any important news from pop culture to current events to entertainment news, interjecting my opinion about the subject. In addition, I do product reviews and travel documentaries when the opportunity arises. So if you're interested in any of these things, welcome! Don’t forget to comment, like, share and subscribe! Thanks for watching! https://www.youtube.com/user/nukem384?sub_confirmation=1 If there's a story you want me to cover, please comment or let me know! I'd love to cover a requested story! My simple recording setup. Get these products on Amazon! By buying products thru my links, I'll earn a small commission that helps keep my videos coming! Thank you very much for your support! Gopro Hero 5 Black http://amzn.to/2ssiS23 Aitesco Lav Mic http://amzn.to/2CgqXGO Find me on social media! Instagram: https://www.instagram.com/nukem384/ Twitter: https://twitter.com/nukem384 Facebook: https://www.facebook.com/nukem384 Blog: https://nukem384.blogspot.com/
