Trove of infected Elasticsearch nodes uncovered

siren

Once again, thousands of misconfigured Elasticsearch servers have placed the internet at risk. The vast majority of the poorly secured servers were hosted on Amazon Web Services. Attackers enlisted 4,000 of those servers into a powerful Point-Of-Sale (PoS) botnet. The security firm Kromtech Alliance, which found the unsecured servers, says that they were researching Elasticsearch […]